31534b2ae5890020840fc5577f3e871b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31534b2ae5890020840fc5577f3e871b
Size

21KB
MD5

31534b2ae5890020840fc5577f3e871b
SHA1

7d1ffa3e8df17269292f73af772dfc9f13f137fe
SHA256

e25d8abbab212b8c42fa99d2e05f9fdbfca469c654fb3a2fdbf21b78d766cc1c
SHA512

15e539ff120cedb2eb8a24363ad45b0e63e6f1476d964f9a9129fd00391b3839b0a7d8478b2d30101fde5e2f7cee8f121d152c4dd9b4a679a686770c5322d947
SSDEEP

384:yf2pBARGGckHlKx0CKZQeFucGAfTQ5pVBN3/:g2paGXkHseFjTSpV/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31534b2ae5890020840fc5577f3e871b

Files

31534b2ae5890020840fc5577f3e871b
.dll windows:5 windows x86 arch:x86

6d61375a9111538d6d0fd67f6c35004c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
CloseHandle
lstrlenA
lstrcpyA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls

Exports

Exports

Export1
Export2

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ