316096c85a2343bd66d9b7c953359bad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

316096c85a2343bd66d9b7c953359bad
Size

16KB
MD5

316096c85a2343bd66d9b7c953359bad
SHA1

8559801f20567c01ed5309f7f2b66fb4e7f8089f
SHA256

7ddcd07a269b8ec6d892bd06cfe90a292b1988339b2394e2f6a12957bef492a7
SHA512

5c706f851f703e5bdc6215900cd7cd088c804598be68b0845258d8cf4c9c8f751b49193dfac6ada581f7bade146bd945eb64abcfefb7889d6474bf43d8576a8b
SSDEEP

384:u5DLMQRb3tJzvb4tqOuhMn12sriCYOOCajPvKUN+lDcH6H4LeoEroEoP4:utzbHDbWPUMn12sOyOCajqS+Jck4LeoO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
316096c85a2343bd66d9b7c953359bad

Files

316096c85a2343bd66d9b7c953359bad
.dll .js windows:4 windows x86 arch:x86 polyglot

7923c767a8b0c1715dc50f0b28960708

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
CompareFileTime
SystemTimeToFileTime
FileTimeToSystemTime
LoadLibraryA
FreeLibrary
GetProcAddress
lstrcpyA
GetLocalTime
GlobalAlloc
lstrcatA

Exports

Exports

DeInitUrlmon
DecodeBase64
DecodeTime
DecomposeCommande
DownloadFile
EncodeBase64
GetDiffTime
GetNextRequest
GetUserAgent
GetUserAgentSize
GetWaitingTime
InitRandom
InitUrlmon
LegalRequest
Random
SetUserAgent
URLEncode2

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ