3ae1ea410b578a4e436b4adf5f94605b | Triage

Sharing

General

Target

3ae1ea410b578a4e436b4adf5f94605b
Size

7.1MB
MD5

3ae1ea410b578a4e436b4adf5f94605b
SHA1

8bbd7bbfc424af064637544f775767178586f348
SHA256

7661aed57e411b0aa01f48cc46ca11fe16f56943b39e269834a6498192910576
SHA512

338290617397dd8e04feb157707cfc387fa0b8e37e32ec881e3321c0010e037dac73e84d6e918a081e57af532e469e8a6653842fd48cece290bcdfaf06c742a7
SSDEEP

49152:gSucSocU97nJTi49VRLdGAVfcD53ltVvT6gKzYz1BF0WmbShOXcop9x40cRiVkJM:gSuX2B7Qu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ae1ea410b578a4e436b4adf5f94605b

Files

3ae1ea410b578a4e436b4adf5f94605b
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ATOB_ConvertAsciiToItem_Util
CERT_ChangeCertTrust
CERT_DecodeCertFromPackage
CERT_DecodeTrustString
CERT_DestroyCertificate
CERT_GetDefaultCertDB
NSS_Initialize
NSS_Shutdown
PK11_FreeSlot
PK11_GetInternalKeySlot
PK11_ImportCert
PK11_ImportCert
PORT_Free_Util
PORT_ZAlloc_Util
PR_Close
PR_GetOpenFileInfo
PR_Open
PR_Read
SECITEM_AllocItem_Util
SECITEM_FreeItem_Util

Sections

CODE
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ