034c473702ccb5e59624d696eb7d15ca | Triage

Sharing

General

Target

034c473702ccb5e59624d696eb7d15ca
Size

18KB
MD5

034c473702ccb5e59624d696eb7d15ca
SHA1

945d8114983732a6b570f5d3a1381a5bdfb04e03
SHA256

2bd7b9a51dd25e5449e82c51a99120cefe04af9e5679586ab6dadf5f051ea52e
SHA512

360010c543cd546806f62bfba1fcc30dd5d5340294e9c31c4ad52102a771fbcced8b55290c67bb1e6de93da7d34255a7b361249b79ef2d6628ee942603f8c705
SSDEEP

384:znZTanfmQK/QEiQPNg/sypBHpJ5k7W+AVHQr60vil8+:zncfmQK/QIPq/syDpsW+AVHQrXvz+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
034c473702ccb5e59624d696eb7d15ca

Files

034c473702ccb5e59624d696eb7d15ca
.dll windows:4 windows x86 arch:x86

f0198bf60c78e22d9791f4ef77e976ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateFileA
CreateProcessA
WriteFile
GetTempPathA
GetLocalTime
GetCPInfoExA
GetACP
CloseHandle
SetThreadPriority
CreateThread
GetModuleFileNameA
DisableThreadLibraryCalls
ExitProcess
VirtualAlloc
VirtualFree
GetSystemDirectoryA
DeleteFileA
Sleep
LoadLibraryA
TerminateThread
GetProcAddress

wininet

InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle

advapi32

ControlService
OpenServiceA
DeleteService
OpenSCManagerA
CloseServiceHandle

shell32

ShellExecuteExA

msvcrt

sprintf
strrchr
strlen
strcpy
strcat
memset
_except_handler3
memcpy

Exports

Exports

DriverProc
modMessage
modmCallback

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ