362196c21a6e690d1ce20eab22a124f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

362196c21a6e690d1ce20eab22a124f3
Size

6KB
MD5

362196c21a6e690d1ce20eab22a124f3
SHA1

a3e8da6e9b5fc18b2181d2fdf3af4f2c4cec666f
SHA256

c18fe8dc9029fbd0aed5e5e8c398cc36eb3cf473ea326d453d33053f08109d77
SHA512

a255c768e7df1cf4c560ea6b2fbb952764c33bd913d3b0129401ac4171f22597d51f9a634534e9aa3047fabfb76e93b46153238eba3deca174cb714c62280fe0
SSDEEP

48:6atopCtJ15YVOSxV0DvwT4s1nJf/tfnwRCLBoacgg0JkWGxzO3VL:BoWXSxV0Do0s1Jf/tfj+9yrGpuV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
362196c21a6e690d1ce20eab22a124f3

Files

362196c21a6e690d1ce20eab22a124f3
.dll windows:1 windows x86 arch:x86

be437fdcbed89d4e21f4439b63f2d6ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsA
GetSystemDirectoryA
CloseHandle
OpenMutexA
RtlUnwind
WinExec

user32

ShowWindow

crtdll

_fdopen
_open_osfhandle
_sleep
fclose
_cexit
malloc
printf
raise
rand
setbuf
sprintf
strcpy

Exports

Exports

_Initialize

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 188B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 844B - Virtual size: 844B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 176B - Virtual size: 176B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 76B - Virtual size: 76B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ