388988b04bfe4d9f9629744b1b3a890f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

388988b04bfe4d9f9629744b1b3a890f
Size

41KB
MD5

388988b04bfe4d9f9629744b1b3a890f
SHA1

6667b46e4732d301d07d3bdbde73b4bca5f427b0
SHA256

14c92e89b834c19dd1034b5f552f64e4377ab07ee0c33ba89259252448220bc8
SHA512

b8594d42e6584b97f10b69667eaf50b9eea29c051b9ea122e58d8f4f7ceb10e109a895639a1824c261845e645ec81138f8259471b5035c6ae6c0f59adceb3ddc
SSDEEP

768:9il98avmNzrYNV3GkbaBba84jv8B4mLIbIz7FsRn0G9rZIIVrp9tURRp/oG:9aZ+5k2p7sE6maIzyVrj+rf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
388988b04bfe4d9f9629744b1b3a890f

Files

388988b04bfe4d9f9629744b1b3a890f
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

WahCloseApcHelper
WahCloseHandleHelper
WahCloseNotificationHandleHelper
WahCloseSocketHandle
WahCloseThread
WahCompleteRequest
WahCreateHandleContextTable
WahCreateNotificationHandle
WahCreateSocketHandle
WahDestroyHandleContextTable
WahDisableNonIFSHandleSupport
WahEnableNonIFSHandleSupport
WahEnumerateHandleContexts
WahInsertHandleContext
WahNotifyAllProcesses
WahOpenApcHelper
WahOpenCurrentThread
WahOpenHandleHelper
WahOpenNotificationHandleHelper
WahQueueUserApc
WahReferenceContextByHandle
WahRemoveHandleContext
WahWaitForNotification

Sections

.0PO5wU4
Size: 33KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.18E9i8D
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.2VkdWX3
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE