2a3fa4a22d4324bb16be7f638c364699 | Triage

Sharing

General

Target

2a3fa4a22d4324bb16be7f638c364699
Size

44KB
MD5

2a3fa4a22d4324bb16be7f638c364699
SHA1

5b2fa7972fb49e921fa66f043fdf3fc35d7ee9c4
SHA256

33ebb0de9437f8efe1b22652ef9fb5137dc371c30e06e55702406fd002c31b7a
SHA512

bd8085c4736099c915d168806a3b128f7bd50f741d1c1b630c02963c0426c5ab5416edef75ab20b4604dd0fe714534ffdc0b12be056f70a3eeb20c0e45837ed1
SSDEEP

384:qxWUGpuuxL8WtTTnFo//EEXeudtLmJItHr3hMNmqGm77yhlo1L5Eu8jHJ7tu:nuuSWtTzFKXbmJIfMNWmfoo1L5Ef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a3fa4a22d4324bb16be7f638c364699

Files

2a3fa4a22d4324bb16be7f638c364699
.dll windows:4 windows x86 arch:x86

cdf8e2e1185d31fb93a7f052e9c86814

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

ord119
ord113
ord131
ord128
ord123
ord115
ord117
ord125
ord114

kernel32

ord477
ord365
ord329
ord476
ord513
ord509
ord248
ord765
ord346
ord349
ord775
ord770
ord772
ord724
ord774
ord385
ord722
ord443
ord377
ord441
ord214
ord395
ord304
ord305
ord811
ord362
ord364
ord397
ord512
ord511
ord795
ord822
ord793
ord515
ord522
ord225
ord552
ord657
ord318
ord312
ord406
ord419
ord553
ord594
ord550
ord551
ord444
ord447
ord525
ord528

Exports

Exports

GetHeroAudio

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ