1ae7b7b1d92d0e1c10135cef4e940785 | Triage

Sharing

General

Target

1ae7b7b1d92d0e1c10135cef4e940785
Size

1.2MB
MD5

1ae7b7b1d92d0e1c10135cef4e940785
SHA1

cda98da5440c7a0239928c9481cc7bf99ab6451a
SHA256

dbd6c7fc142434461fdddd1ff0c4c31d2e122fe5f22c050e8c369a616c240e0d
SHA512

6864a08e515f1ae4f04fa02cbe1d0ed7e0a0b1771adf29775ddead5c2c31234b9d04d4584ff00b67ac8eef35803603c662029907de79369db82a10ed06470dbe
SSDEEP

24576:gMVslGiqAPaZk6ZU1RSp4R3Eigu0ThQsO4duT0K7XLX2l8UTF9p:HuTB56S14piGh1M0MbXI8UTF3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0x0007/dvm.dll

Files

1ae7b7b1d92d0e1c10135cef4e940785
.rar
0x0007/dvm.dll
.dll windows:5 windows x86 arch:x86

d6e8ddca151a5fdce36f63bedbd725e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
CreateFileA
GetFileSize
SetFilePointer
GetLastError
VirtualAlloc
GetModuleFileNameA
CloseHandle
GetProcAddress
GetModuleHandleA
ExitProcess
ReadFile
VirtualFree

user32

MessageBoxA

Exports

Exports

VMCALL

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1009B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RLD0
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RLD1
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ