3d4bc46eb10155f297dcb2706bbc9e3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d4bc46eb10155f297dcb2706bbc9e3e
Size

227KB
MD5

3d4bc46eb10155f297dcb2706bbc9e3e
SHA1

2ed091c3a881db0593a24b8a404a7b5fe8088d3a
SHA256

8f754b3136e128ae47f115b2dfe2e3d65828d310bb1ada3ef45577dd4141cca0
SHA512

acadc976d9898feb823a78a93727336e76d00fb1565753e552fecf97ce4fba24c7176d372638edc9c58691c59fa206b75baa8d7f37e6456d9ca58e785d122fa1
SSDEEP

3072:XJ9phkZnsgIsxdt49FSgJnNWe1lUUH11LLweQzNI1N67xhrp2:zqPOSQNWHUH11oPC1qhrM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d4bc46eb10155f297dcb2706bbc9e3e

Files

3d4bc46eb10155f297dcb2706bbc9e3e
.dll windows:5 windows x86 arch:x86

addd44d204f440efac5b7cc454bae33f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegLoadKeyW
RegQueryValueExA
RegEnumValueA
RegQueryValueExW
RegFlushKey
RegOpenKeyExA
RegEnumValueA
RegDeleteValueA
RegOpenKeyA
RegQueryValueA

kernel32

OpenFile
ExitProcess
GetPriorityClass
FindClose
GetFileTime
OpenFileMappingA

user32

DrawTextA
GetDC
InsertMenuA
LoadMenuA

Sections

.jjlih
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gpki
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.achga
Size: 163KB - Virtual size: 547KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mdfe
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ