1ae22bb10ef3b95f2c1976d45fcc1f7d

General

Target

1ae22bb10ef3b95f2c1976d45fcc1f7d
Size

22KB
MD5

1ae22bb10ef3b95f2c1976d45fcc1f7d
SHA1

bed2602c9608c8a37c7a11360af656a611266607
SHA256

55dfb0fa2c21cdd43f8ddaec491ffba83cd6d55c80a4e15400dea368c9c85609
SHA512

6aa5a74013506d7dbc420847944a15d1d5ab0991599f4d7f9eca9849b7ce3cde3ee8ac5238c23a11585bc50f79e597dc3028163fa7913ca00de3296cf4beaa9e
SSDEEP

384:OcK1Da7xNuxw1bkByZTGQEJL5IQHR/RFkGZgTXgT:OcK1DMzuxwpuyPO15HpZs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ae22bb10ef3b95f2c1976d45fcc1f7d

Files

1ae22bb10ef3b95f2c1976d45fcc1f7d
.dll windows:4 windows x86 arch:x86

6a15f741ecfac8ecb879884462c4e3a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
GetVolumeInformationA
LoadLibraryA
MultiByteToWideChar
Sleep
WideCharToMultiByte
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

msvcrt

_strnicmp
__dllonexit
_errno
_itoa
atoi
fflush
free
malloc
memcpy
memset
strchr
strlen

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysAllocStringByteLen
VariantInit

user32

wsprintfA

Exports

Exports

DllMain
Main
beforemain
prestart
start

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 294B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a15f741ecfac8ecb879884462c4e3a3

Headers

File Characteristics

Imports

kernel32

msvcrt

ole32

oleaut32

user32

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.data Size: 512B - Virtual size: 292B

.rdata Size: 1024B - Virtual size: 548B

.bss Size: - Virtual size: 11KB

.edata Size: 512B - Virtual size: 294B

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 15KB - Virtual size: 15KB

.data
Size: 512B - Virtual size: 292B

.rdata
Size: 1024B - Virtual size: 548B

.bss
Size: - Virtual size: 11KB

.edata
Size: 512B - Virtual size: 294B

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB