038214d260549a7fd8bcc9534b2f872f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

038214d260549a7fd8bcc9534b2f872f
Size

84KB
MD5

038214d260549a7fd8bcc9534b2f872f
SHA1

f86827d972e662e5a65cbdcc48934552d15f47a5
SHA256

15e29a7377f5a4087634e097334610332af9666f13f83e6b70820e5263d40e15
SHA512

a684c7bce972ea237f2c97f1869db367bcec6764050865459a011b4be7133fd44df1959fbb306b96983ad7a875d6fc0625a611942d15c6f71206702280971eb2
SSDEEP

768:stBLP7NtK0JjU3xM4f1ff0IhdDJ//uhNuEneFSnNQF9cR1MxnT4EtMIqNfKPAn:sXN00JwVkYPEhQ41MVbtTqNfKU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
038214d260549a7fd8bcc9534b2f872f

Files

038214d260549a7fd8bcc9534b2f872f
.dll windows:4 windows x86 arch:x86

9a39866667784770e14dfa8df9241ee4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetModuleFileNameA
VirtualProtect
lstrlenA
VirtualFree
VirtualAlloc
CloseHandle
lstrcatA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalSize
GlobalReAlloc
CreateThread
GlobalFree

msvcrt

strstr

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ