3e1f90eb74feb41fefc6f4e0080f6405 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e1f90eb74feb41fefc6f4e0080f6405
Size

213KB
MD5

3e1f90eb74feb41fefc6f4e0080f6405
SHA1

f6887e8697cd67dd279d1a08118b1961bd9c0b16
SHA256

3a9716128edd88427821ae0f331e5d1068b14a02eaf6427495b7727422a8c991
SHA512

cb3bb044ff588467dd06437bfc293c69092166271a8f08b6f3936f68ce0cd6388a609e90c8f0cae5bb2410af803377540185bdaa967a923eb2c2283e19438e8c
SSDEEP

6144:b8xKPOGoFMCzUm7DARIk7s9AT4nrfhcor6R/kF:ZOyCzUkAedJrJcdkF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e1f90eb74feb41fefc6f4e0080f6405

Files

3e1f90eb74feb41fefc6f4e0080f6405
.dll windows:4 windows x86 arch:x86

545179dc0cedc718decd99ff2519f29c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

WSACleanup

ole32

CoTaskMemFree

wininet

InternetReadFile

urlmon

URLDownloadToFileA

user32

GetForegroundWindow

gdi32

CombineRgn

advapi32

RegQueryValueExA

shell32

SHGetFolderPathA

oleaut32

SysAllocString

Exports

Exports

Always
EMBLE_DELOP_CODER
GetPlayerVersion
playAdk

Sections

.text
Size: 203KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE