368c308a2a8474b83f5377cadd35a8a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

368c308a2a8474b83f5377cadd35a8a2
Size

100KB
MD5

368c308a2a8474b83f5377cadd35a8a2
SHA1

0f00e5d6387c249df5440d2cb6be9a8f72024e04
SHA256

91863ed87db54e558155d7f9883d3d2eed07f57936387ede1e3d807138ec73a8
SHA512

36bd2a61438dc82c62f90bc4008de69c25654a342fe986d1fb6d245f37aeed4d8ad55fe902ad8868c721456e65b1c5d90a328c928e2d09b11d744d480156c97e
SSDEEP

3072:kmCf4Kr1Z6lILioECajjpK4ainrJvJ7kJ:qd1ZljIjY4aire

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
368c308a2a8474b83f5377cadd35a8a2

Files

368c308a2a8474b83f5377cadd35a8a2
.dll windows:4 windows x86 arch:x86

bb8dac29cdda5ac9af46bd7baef9121b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeResource
GetCurrentProcessId
GetFileTime
GetProcAddress
GetSystemTimeAsFileTime
HeapAlloc
HeapCreate
MulDiv
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
UnlockFile
lstrcatA
lstrcpynA
lstrlenA

user32

CallWindowProcA
DestroyMenu
DestroyWindow
GetWindowRect
IsDialogMessageA
IsWindow
IsWindowEnabled
IsWindowVisible
PostMessageA
PtInRect
RegisterClipboardFormatA
SetWindowPos
ValidateRect

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1024B - Virtual size: 894B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ