315b0c11d8c543c3bcdbad088aae195f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

315b0c11d8c543c3bcdbad088aae195f
Size

45KB
MD5

315b0c11d8c543c3bcdbad088aae195f
SHA1

e35b899e607d98e776a9a1209af2d5d3c5091abb
SHA256

e1cebf5e60601bd16d8ede2b79d59d110364d8be9c0cfe704d3f61a120adc90c
SHA512

3c85c71e2169ff97467deedbc91f14b6926aee85e6b775e371ff21a1be34b75f816a4460b42d87bd683090096ddd7dd570bdec43b6ebb6604ce1f11ab981ed33
SSDEEP

768:Jk1Db3bsgcW9VibJH5ZkNVINzVGfYKrXmZ3Qm:Jklwi9UVH7QeBGAs2Z3x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
315b0c11d8c543c3bcdbad088aae195f

Files

315b0c11d8c543c3bcdbad088aae195f
.dll windows:4 windows x86 arch:x86

069ec06b5017e8d4371ac5e6eae7c747

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

__vbaFileClose
__vbaExceptHandler
__vbaDateR8
__vbaCySgn
__vbaCyI2
__vbaAryUnlock
__vbaCyFix
__vbaChkstk
__vbaBoolVar

kernel32

SetUnhandledExceptionFilter
lstrcmpA
lstrcatA
VirtualFree
GetStartupInfoA
GetModuleHandleA
GetLastError
GetCommandLineA
FindResourceA
ExitProcess
CloseHandle
EnumResourceNamesA

dinput

DirectInputCreateW

ole32

CoCreateInstance
CoDisconnectObject
CoGetClassObject
CoInitialize
CoUninitialize
CreateOleAdviseHolder
DoDragDrop
OleInitialize
OleUninitialize
ReleaseStgMedium
StgCreateDocfileOnILockBytes

Sections

.text
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ