0332ccb8132391281a0913409b55e2da

General

Target

0332ccb8132391281a0913409b55e2da
Size

77KB
MD5

0332ccb8132391281a0913409b55e2da
SHA1

795acdea28bf182d66b6485b300b202f1dd23853
SHA256

419bc14ef1e7b81310e38952d19871622d1ff37404e0712c6dd80c8ab7dbeeb5
SHA512

19fdc911caad26d786a26aa5d1315abacac93f69b7f7e92a0a26da2549a0403ff6f3444fefe75837ed31a7c817874a5cd5540bd46e093218f4c1303668955bc7
SSDEEP

1536:UohVmRW8/EOrMwRygioBASwzle6oFkti7olDHZCzI8:3K1Qg5BUle6oFkthlz0P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0332ccb8132391281a0913409b55e2da

Files

0332ccb8132391281a0913409b55e2da
.dll windows:4 windows x86 arch:x86

42e53c9bd79532675756618a7b3b5ada

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentStringsW
TerminateProcess
FreeEnvironmentStringsA
IsBadCodePtr
GetTickCount
IsBadWritePtr
IsBadReadPtr
InterlockedExchangeAdd
EnterCriticalSection
DeleteCriticalSection
SetEvent
CreateTimerQueueTimer
HeapDestroy
QueryPerformanceCounter
GetFileType
GetLocaleInfoA
SetLastError
GetModuleFileNameA
WaitForMultipleObjects
HeapFree
DisconnectNamedPipe
UnmapViewOfFile
CreateNamedPipeA
GetCurrentProcessId
GetCPInfo
SetUnhandledExceptionFilter
InitializeCriticalSection
LeaveCriticalSection
DeleteTimerQueueTimer
GetVersionExA
lstrcatW
GetStdHandle
InterlockedCompareExchange
LCMapStringA
ReleaseMutex
WaitForSingleObject
InterlockedExchange
GetSystemInfo
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
ResetEvent
WriteFile
OpenProcess
LCMapStringW
HeapAlloc
CreateMutexW
CreateEventA
WideCharToMultiByte
GetCurrentThreadId
GetSystemTimeAsFileTime
InterlockedDecrement
GetStartupInfoA
GetOEMCP
ConnectNamedPipe
FreeEnvironmentStringsW
lstrcpyW
GetLastError
DuplicateHandle
GetBinaryTypeA
GetACP
RtlUnwind
GetEnvironmentStrings
UnhandledExceptionFilter

user32

wsprintfW
LoadIconA
DrawIcon
CreateIconFromResource

advapi32

InitializeSecurityDescriptor
GetUserNameA
SetSecurityDescriptorDacl

msvcrt

memset

Exports

Exports

zzraqsib

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42e53c9bd79532675756618a7b3b5ada

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 56KB

.data Size: 18KB - Virtual size: 48KB

.rsrc Size: 1024B - Virtual size: 760B

.reloc Size: 1024B - Virtual size: 708B

.text
Size: 56KB - Virtual size: 56KB

.data
Size: 18KB - Virtual size: 48KB

.rsrc
Size: 1024B - Virtual size: 760B

.reloc
Size: 1024B - Virtual size: 708B