31ed4d525d0332cf07295eb6fcd2e217 | Triage

Sharing

General

Target

31ed4d525d0332cf07295eb6fcd2e217
Size

54KB
MD5

31ed4d525d0332cf07295eb6fcd2e217
SHA1

93b044c9a0854a6d2601c448d0607dfcdb1dbb6e
SHA256

f6f47c13c758bf9a412ff89d691dc5f399168f836bf9bc30f6beec7d3eaf8cd5
SHA512

d6ef69a9e9847eabf67ab381a2cec0d06ad0a978aa2771ff5ad920f044791d6f5b02c20aa9e1e3c0676c5fdbed000ec8a1bd6268ab7b892f1d6d77fd9308ce88
SSDEEP

1536:oZ/ii4jHr6Da+f4N6HA7ppmXjUvnToIfAIOO87d:o4Oa+TH0WjwTBf2J7d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31ed4d525d0332cf07295eb6fcd2e217

Files

31ed4d525d0332cf07295eb6fcd2e217
.dll windows:4 windows x86 arch:x86

5992e14bd90ae2b6d6788fe0076e2d20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiA
lstrlenA
lstrcpyA
GetStdHandle
HeapAlloc
GetProcessHeap
HeapFree
GetLastError
CreateFileA
WriteFile
ReadFile
CloseHandle
SetFilePointer
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
lstrcpyW
lstrlenW
lstrcatW
CreateDirectoryA
lstrcpynA
DeleteFileA
SetFileTime
FindClose
FindFirstFileA
SetCurrentDirectoryW
lstrcmpW

user32

FindWindowExW
wvsprintfW
SendMessageW

Exports

Exports

extract
extractFile
extractV

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ