3bbdce66d3f15d82e5e7d8533f484e65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bbdce66d3f15d82e5e7d8533f484e65
Size

88KB
MD5

3bbdce66d3f15d82e5e7d8533f484e65
SHA1

0b51efd49e395be6634cc885b4a4c086fbd05175
SHA256

14a525025527bec79367ca300290848f94943a62d4c73fdc1fd65f23d4e6b256
SHA512

27ee68d8e60edfec44651738a70f5e84ad8e11a505f183d9c01aa5e0c67d41b5ffe2c715d545932d2e6517b3204b1aefb1a47a767441ea7c6c8e0c05ffada89d
SSDEEP

1536:CU9Rz35cOODnkZn7Qv6By4LYV/rb18t26/y8jJ5Ms9itE:b9V3tV5Ev6BnsBc2yHJys9itE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bbdce66d3f15d82e5e7d8533f484e65

Files

3bbdce66d3f15d82e5e7d8533f484e65
.dll windows:4 windows x86 arch:x86

a9547091a06a6a6ef52bf7ac2b9fd79a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFullPathNameW
SetEndOfFile
GetDiskFreeSpaceExW
GetLogicalDriveStringsW
GetCurrentProcess
DeleteFileW
GetSystemInfo
GetVersionExW
SetFilePointerEx
GetModuleHandleW
GetCurrentThread
GetDriveTypeW
FormatMessageW
GetProcAddress
CreateHardLinkW
GetModuleHandleA
GetVolumeInformationW
GetTimeFormatW
LocalFree
GetFileSizeEx
GetDateFormatW
CloseHandle
GetLastError
CreateFileW
DeviceIoControl

advapi32

LookupAccountSidA
OpenEventLogW
LookupAccountSidW
RevertToSelf
LookupAccountNameW
AdjustTokenPrivileges
AllocateAndInitializeSid
LookupPrivilegeValueW
CheckTokenMembership
CloseEventLog
OpenProcessToken
OpenThreadToken
ImpersonateSelf
ReadEventLogW
EqualSid

Exports

Exports

pqntlj

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ