3752aeb50e92bf0e8d23281b5ff7c53c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3752aeb50e92bf0e8d23281b5ff7c53c
Size

28KB
MD5

3752aeb50e92bf0e8d23281b5ff7c53c
SHA1

aa802f0c07c32d621fcb7322db676d5c84a169ef
SHA256

2ce2c4c7be706edd1c31e80a955205941fa4a538b3e99c618b6dc7e2504d2ab6
SHA512

4a72fa11645616466ca9b752c75815482e8e8e486a2ef88c1f91075f3f456e86b4edf4054bf8122260dcb317de1418d671b6d357d1eec6966ecb6db519672032
SSDEEP

192:ZsvOFGPLQix2SrmCsDuh2Rp5Rpc0o19bFg:ZsuG3xZhh2R7RZYE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3752aeb50e92bf0e8d23281b5ff7c53c

Files

3752aeb50e92bf0e8d23281b5ff7c53c
.dll windows:4 windows x86 arch:x86

4d531943e72319b910b46b563f047fe2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2818
ord939
ord535
ord533
ord6877
ord5194
ord5465
ord1997
ord798
ord4278
ord860
ord2764
ord858
ord540
ord800
ord537

msvcrt

_adjust_fdiv
malloc
_initterm
free
?terminate@@YAXXZ
_except_handler3
_onexit
atoi
strstr
__CxxFrameHandler
__dllonexit

kernel32

Sleep
ReadProcessMemory
ReadFile
GetModuleFileNameA
GetFileSize
CreateFileA
CloseHandle
CreateThread
SetFilePointer
OpenProcess
GetCurrentProcessId

user32

FindWindowA
CallNextHookEx
GetMessageA
DispatchMessageA
UnhookWindowsHookEx
TranslateMessage
SetWindowsHookExA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

ws2_32

recv
closesocket
send
connect
htons
socket
gethostbyname
WSAStartup

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARDAT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 754B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ