31b2e3fd7877dddc045e8cfe9147d90a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31b2e3fd7877dddc045e8cfe9147d90a
Size

238KB
MD5

31b2e3fd7877dddc045e8cfe9147d90a
SHA1

29b46c179cbe9c1b41298091c66e7db983bf45d7
SHA256

75fe6ae63314c2c731b77824cd6098dc99ede073247ea0f586bf333ab42624a6
SHA512

51627edfc4f8dd730ebb4d29a5ba54fe5cb2c6d5a41643e62ca35fc839b88b093fbde62cbfea291c6895b39021ed9775ac12d4ba7e9ad0fb307502145b8b5589
SSDEEP

6144:d2GIALvQUCtfLTU+3uQNHWc2Ojbl/UH0f:wGIAL1wX53drl8H6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31b2e3fd7877dddc045e8cfe9147d90a

Files

31b2e3fd7877dddc045e8cfe9147d90a
.dll windows:4 windows x86 arch:x86

6c2329596ba63d0edbe5b2c6696d8149

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsBadHugeReadPtr
LoadLibraryA
IsBadReadPtr
VirtualAllocEx
GetProcAddress
GetCommandLineW
lstrlenW
GetACP
ExitProcess
GetCommandLineA
ExitThread
GetModuleHandleA
GetModuleHandleW

Sections

CODE
Size: 223KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gdata
Size: 1024B - Virtual size: 733B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ