31a5941436e47296162b4f220bb20256 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31a5941436e47296162b4f220bb20256
Size

28KB
MD5

31a5941436e47296162b4f220bb20256
SHA1

152b73ae179b509915227d7604814d0b35fc191e
SHA256

75271d22fe80b968860a9a4e354e9eddbb84236746d6c8e8ac25c07b21229445
SHA512

29b89381c6de6787b0914b207b0ef04a32cd3bd5e826d8150661efb66705f0e15ac8577f451ce89a9bbf86c305f8e0371b523cde4c8234c8b678fba52e6b448e
SSDEEP

384:BMmYqid5khIMb8DwLbyqVUyFcPp4Jqskbpl5D3vkSOS2Cry0I0fbBxRJKuP4lHqR:bFmdELbyqVZ+CJqxpDMS72CryybFm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31a5941436e47296162b4f220bb20256

Files

31a5941436e47296162b4f220bb20256
.dll windows:5 windows x86 arch:x86

6a5b4ef84d0f0539ba0405eb3a299ebd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetWindowsDirectoryW
LoadLibraryW
GetLastError
lstrcatW
CreateFileW
LoadLibraryA

advapi32

RegOpenKeyExW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ggttg3
Size: 512B - Virtual size: 7B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ