2404d8014b6b6e46861764f4995c457e

General

Target

2404d8014b6b6e46861764f4995c457e
Size

236KB
MD5

2404d8014b6b6e46861764f4995c457e
SHA1

b2132afc8513931fe4c6a490534f81725e648250
SHA256

dc0d05b1513665110feb6e261daa8a1b568cf3374868b6b1d99392778492bbff
SHA512

ba87a4f9beee423293ae7aeb854647eb2bd64d525d1bb69214c2e67bf3b03bf75ce706ab4025ecfcbb0ef3efe745493aba1234a63f43cee9850374b178477ba2
SSDEEP

6144:aHzCA0cL3hkOOW3X9k30aBrceRxb8ewVwNDIebcLUMWWj:RcjmOh3tk30aBrceRnZb7Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2404d8014b6b6e46861764f4995c457e

Files

2404d8014b6b6e46861764f4995c457e
.dll windows:4 windows x86 arch:x86

46bf2bf3cd5c03654d47baad4255014c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileMappingA
ExitProcess
ExpandEnvironmentStringsA
FreeEnvironmentStringsA
GetCommandLineA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetLocaleInfoW
GetModuleHandleA
GetProcAddress
GetStringTypeW
GetThreadContext
GetVersionExA
GlobalAddAtomA
HeapAlloc
HeapCreate
InterlockedExchange
IsBadStringPtrA
LCMapStringA
OpenProcess
UnhandledExceptionFilter
WaitForMultipleObjects
lstrcpyA

advapi32

AdjustTokenGroups
BuildImpersonateTrusteeA
ConvertSecurityDescriptorToAccessNamedA
RegConnectRegistryA
SetSecurityDescriptorRMControl

user32

GetWindow
GetWindowRect
GetWindowTextA
InsertMenuA
InvalidateRgn
IsDialogMessageA
GetPropA
RegisterClassA
SetTimer
SetUserObjectSecurity
SetWindowPlacement
SystemParametersInfoA
GetMenu
GetCapture
DrawMenuBar
FillRect
DispatchMessageA
PostQuitMessage
CreatePopupMenu

ole32

CoInitializeSecurity
CoGetStdMarshalEx
IsEqualGUID

ddraw

DDInternalLock
DSoundHelp

Exports

Exports

GetCDInfo

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46bf2bf3cd5c03654d47baad4255014c

Headers

File Characteristics

Imports

kernel32

advapi32

user32

ole32

ddraw

Exports

Exports

Sections

.text Size: 124KB - Virtual size: 124KB

.data Size: 96KB - Virtual size: 156KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 124KB - Virtual size: 124KB

.data
Size: 96KB - Virtual size: 156KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 4KB - Virtual size: 4KB