3b351a9c20b7ad254c3d3260ec0dc04b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b351a9c20b7ad254c3d3260ec0dc04b
Size

13KB
MD5

3b351a9c20b7ad254c3d3260ec0dc04b
SHA1

a346468f44bafba2a360b3f72a6caff71790bb69
SHA256

d1d3e1825ef79e7905a10f7e5b4c571fd946aaf0759a7bce593b68a5c1fd8bce
SHA512

e37259871507159e578847cafd1fe7e800c783b2f9eac54462c3c216d22d98de3f4c533fc7d265d5e2a81d6d74c008ea64cf947e23e979df79cf1f2fe1b81d9b
SSDEEP

192:yhKvHYmwPQKopqYV9/4g37aYsUZEcaway0SNN+/kg491aKfsKnfjuT:fvwYKo19k8ZTaway0SNN+/kg81acsTT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b351a9c20b7ad254c3d3260ec0dc04b

Files

3b351a9c20b7ad254c3d3260ec0dc04b
.dll windows:4 windows x86 arch:x86

35ba051f9e3a9fecba421b519c8b72ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

rpcrt4

UuidToStringA

kernel32

GetModuleHandleA
FileTimeToSystemTime
GetSystemTimeAsFileTime
Sleep
OpenProcess

advapi32

OpenProcessToken
ImpersonateLoggedOnUser
CreateProcessAsUserA

ole32

CoCreateGuid

Exports

Exports

QuerySet

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ