3a5a06f6fdbafcf05aab13aed8ec74ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a5a06f6fdbafcf05aab13aed8ec74ce
Size

88KB
MD5

3a5a06f6fdbafcf05aab13aed8ec74ce
SHA1

413d461d641018e2cce70fd706a9ff26e180c642
SHA256

51763741bfa26dbeb530491ecb1c69956342cb54106cae1220c8b3435a93d38c
SHA512

60f2bda0449c412ba3a6f56c311040dbceba6aefb537fa7f35cbab36c227fdca16de6a28643eb567d871a3ab3cb8b13af84bf5d4000a69e9415496ef785edf65
SSDEEP

1536:kvu/qP6TJvT2frnL2Smwr97hANn9iK7dy:kvYFTFYbLrmwpd0iK7d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a5a06f6fdbafcf05aab13aed8ec74ce

Files

3a5a06f6fdbafcf05aab13aed8ec74ce
.dll windows:4 windows x86 arch:x86

c6d7e9d69395421294e92cdfe7045947

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualProtect
QueryPerformanceCounter
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount

msvcrt

memcpy
_except_handler3
free
_initterm
malloc
_adjust_fdiv

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ