15389cce6bd4fcc0f0bd394a2e84fa78

General

Target

15389cce6bd4fcc0f0bd394a2e84fa78
Size

20KB
MD5

15389cce6bd4fcc0f0bd394a2e84fa78
SHA1

4d582c928a746b4ce91223117657c05fc82e7213
SHA256

dd31f20d2acab8926a772cc13767b104650225fe1f6f8c29516f96b9501971ca
SHA512

fbe82c4434c535b2ead108552893b80046cd1546b2e3e2be41cf34a32e8a16b59527546e21f9c489ad570406f8f58804b6652eba81d0dc05dd2f69bb1e085954
SSDEEP

192:nwCIM46mFabZXRT6Cf4GQun6B9AX5VGgB+LDEuOu+wBBTUnv:wiwGd6cG2zCb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15389cce6bd4fcc0f0bd394a2e84fa78

Files

15389cce6bd4fcc0f0bd394a2e84fa78
.dll windows:1 windows x86 arch:x86

f4fe72bb66ad33d3afb9deeb5e43da9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

WriteFile
CreateFileA
SetFilePointer
SetEndOfFile
CloseHandle
ReadFile

user32

wsprintfA

Exports

Exports

CLSIDFromProgID
CLSIDFromString
CoAddRefServerProcess
CoCreateGuid
CoCreateInstance
CoCreateInstanceEx
CoGetClassObject
CoGetMalloc
CoInitialize
CoInitializeEx
CoInitializeSecurity
CoRegisterClassObject
CoReleaseServerProcess
CoResumeClassObjects
CoRevokeClassObject
CoSetProxyBlanket
CoSuspendClassObjects
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CreateBindCtx
CreateOleAdviseHolder
CreateStreamOnHGlobal
IIDFromString
MkParseDisplayName
OleInitialize
OleLoadFromStream
OleRegEnumVerbs
OleRegGetMiscStatus
OleRegGetUserType
OleRun
OleSaveToStream
OleSetContainedObject
OleSetMenuDescriptor
OleUninitialize
StringFromCLSID
StringFromGUID2
StringFromIID
WriteClassStm

Sections

CODE
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f4fe72bb66ad33d3afb9deeb5e43da9b

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

CODE Size: 3KB - Virtual size: 4KB

DATA Size: 12KB - Virtual size: 24KB

.idata Size: 512B - Virtual size: 4KB

.edata Size: 1KB - Virtual size: 4KB

CODE
Size: 3KB - Virtual size: 4KB

DATA
Size: 12KB - Virtual size: 24KB

.idata
Size: 512B - Virtual size: 4KB

.edata
Size: 1KB - Virtual size: 4KB