402b14f11bd2f05a91aae5e5e29a0594 | Triage

Sharing

General

Target

402b14f11bd2f05a91aae5e5e29a0594
Size

66KB
MD5

402b14f11bd2f05a91aae5e5e29a0594
SHA1

67a338394a3f10a283294808a40a12edc4f36ec7
SHA256

e0900d26ffaee51edc29bdde2a25e4738378f7a4faa3783a070affd992fe67c4
SHA512

880c2b8ebfd058d8be07d0327ed342b6fd948f8ea56c13e246df79b0823e9887244984344f890d7a9c8bbb132c94cd5b98a5db903e228173b01952e2c87c6ffe
SSDEEP

1536:HKaouK0rof8925RMehGW4Z6cHIP3lqshuqRmW4b:HKaouK99MqB4ZO3HnhM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
402b14f11bd2f05a91aae5e5e29a0594

Files

402b14f11bd2f05a91aae5e5e29a0594
.dll windows:5 windows x86 arch:x86

b41ab26011b85071f6a14b54fa6910ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_strlwr
_endthread
_beginthread
_itoa
_stricmp
strrchr
strchr
isspace
memmove
strncmp
fclose
fwrite
fopen
atoi
strstr
atol
memset
_except_handler3
memcpy

kernel32

RaiseException
InterlockedExchange
LocalAlloc
CloseHandle
HeapCreate
FreeLibrary
lstrcmpiA
GetModuleHandleA
LoadLibraryA
GetProcAddress
HeapFree
HeapAlloc
GetFileTime
Sleep
lstrcpynA
GetLastError

Exports

Exports

utld

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.opcl
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ