38ff97893c6c2000118536c66c4de8e0 | Triage

Sharing

General

Target

38ff97893c6c2000118536c66c4de8e0
Size

412KB
MD5

38ff97893c6c2000118536c66c4de8e0
SHA1

0fc885db6d916a69ae2261517383d6d04e8e0f57
SHA256

e93280037314b47c46846d2e8247a1d0c090868a6762489eda8f323dbadf1cf7
SHA512

bace2f6a41138b8c65dbee108b6a61f99c48553d961b82f2526ef700d61085c39a71bd6578cb01d44794194fb84b59e17bf4d536fc48626b1a3f0b12621221ef
SSDEEP

6144:MBmMGgG7SFZDLc5BDEakOYcthVLG6Sb2BRyVEvj4HLt9yAf37donjrp+4D/H:MBtFi5BDESq6Sb2BRyojYEAP7de

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38ff97893c6c2000118536c66c4de8e0

Files

38ff97893c6c2000118536c66c4de8e0
.dll windows:4 windows x86 arch:x86

16438f6d415319d770831822065c3ec5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

HashData

kernel32

CreatePipe
GetStartupInfoA
GetStartupInfoW
ExitProcess
ReadFile
CloseHandle
WriteFile

msvcrt

malloc
free

winmm

mixerOpen

Exports

Exports

newgsx

Sections

.code
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 535B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 360KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lzmiyg
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ