38721b0d669ffec571232f4ba956cd8b | Triage

Sharing

General

Target

38721b0d669ffec571232f4ba956cd8b
Size

46KB
MD5

38721b0d669ffec571232f4ba956cd8b
SHA1

fb4f0dffaf5c2fdbcfc511d793ca64038540efc3
SHA256

e8fb38dc3206fe93b80dee1bec812c523bc8093c6b36ac1d8894608a52772374
SHA512

557dce932d65eb1c7556630c5e87293c361411727464bb8d2426928440c81392b1a7f252aa5ad1caebc72343e281d3a7ac3dda201b23fdef1717506b7a71524b
SSDEEP

768:bwGyry17a84MVVaoHtwh4WiTDMf0q+RlaBLA/emtsl:bxjVVDOqWIQsxtw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38721b0d669ffec571232f4ba956cd8b

Files

38721b0d669ffec571232f4ba956cd8b
.dll windows:4 windows x86 arch:x86

26640d14bc9a86deb3d0682f5ffe708f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersionExA
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
VirtualAlloc
HeapReAlloc
HeapSize
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
FlushFileBuffers
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CloseHandle
GetLocaleInfoA
VirtualProtect
GetSystemInfo

Exports

Exports

MT_GetI8
MT_Init
RanRot_GetI8
RanRot_Init

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ