202f3db88bee2742fcb658d9e2281eac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

202f3db88bee2742fcb658d9e2281eac
Size

11KB
MD5

202f3db88bee2742fcb658d9e2281eac
SHA1

0d643a21b4f2dd0f26252a33ef07c4aed40cf367
SHA256

15ba323d40295e5aa9b15f85af4591832d778dfa17360565298e64c71a0a738b
SHA512

b48694ed486cc280efd4857b003468c68f3b220188605813d5a96de93c202532be5868d9493aa9a237ad1f0b2b688865831c5e01e3575f92232860cb3dcafe49
SSDEEP

192:V4AOcTIjBNt+yHn3vl88l0idBqTjE4cTgYd0:V4AOaIcyHn3v2FiWEj0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
202f3db88bee2742fcb658d9e2281eac

Files

202f3db88bee2742fcb658d9e2281eac
.dll windows:5 windows x86 arch:x86

fe95ebbd7e16d1ccfba6330fc70e84f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
GetTickCount
GetSystemDirectoryA
lstrcatA
CloseHandle
lstrcmpA
FreeLibrary
WaitForSingleObject
Sleep
GetTempFileNameA
LoadLibraryA
GetModuleHandleA
DeleteFileA
CreateThread
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent

user32

CopyIcon
FindWindowA
LoadCursorA
GetWindowThreadProcessId
EnumWindows

Exports

Exports

Exucute

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1017B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ