359b277e126f5df166481e90f3bf424d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

359b277e126f5df166481e90f3bf424d
Size

69KB
MD5

359b277e126f5df166481e90f3bf424d
SHA1

dacff717d68d9f2345073adc3693cc062f6e8c59
SHA256

44df2d837d7cb434036924b6df3cae3fba3021f3429760cedce404469563b370
SHA512

7cd4a7dbf0555630a64836d8dff7f1c217c535effad9ce49527dad3c5f86781188c1a78fcf1cd1595db5b4f6aa73c393b0d3a8df67a83ed676188b8c0e077180
SSDEEP

1536:Bnj9OGWw6py/ZLj1PvBtURQCOHWlS2gyvQp+tg77:Vj9OtwoA5jZvBtURtOd2gyvQp+tg77

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
359b277e126f5df166481e90f3bf424d

Files

359b277e126f5df166481e90f3bf424d
.dll windows:4 windows x86 arch:x86

b2b47406d9117480b2baf1912c7f3efe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersion
ExitThread
lstrcpynA
lstrlenA
RaiseException
GetLastError
ExitProcess

advapi32

RegOpenKeyExA

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ