3d53e834ab4452d68efeaae561d4ef07

General

Target

3d53e834ab4452d68efeaae561d4ef07
Size

87KB
MD5

3d53e834ab4452d68efeaae561d4ef07
SHA1

71db79adfde3646219055a98bd8e25421282bdf1
SHA256

f8effa413c40f795e5dc934b44f93372c7bef70ea5a63294663eda66e1956496
SHA512

3ccec657204b2c7f50112aef21fd42419badb0bb48609211cbb461e0f240efcfe0ea92457a53f17d0901f6354af086e3fccc447a855f1136ea069e9aeb91d11f
SSDEEP

1536:+kaM84XFl7028JTvF8dZ4rRYWU9IgcLmAz0KEWQR:oNG50xJp8dZmRUhcv0KiR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d53e834ab4452d68efeaae561d4ef07

Files

3d53e834ab4452d68efeaae561d4ef07
.dll windows:1 windows x86 arch:x86

34eeb8ee4c764a0487f3a0dbcbce7916

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

comctl32

InitCommonControlsEx

kernel32

CloseHandle
CreateFileW
ExitProcess
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
GetCommandLineW
GetFileAttributesW
GetFileSize
GetFileType
GetLastError
GetStringTypeA
GetVersionExA
GetVolumeInformationW
GlobalAlloc
GlobalFree
GlobalReAlloc
MultiByteToWideChar
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile

oleaut32

SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantClear

user32

CharLowerBuffA
CharNextA
CharUpperBuffA

wsock32

closesocket
WSACleanup

Exports

Exports

ADDRVERIFY
CHKDGT
CITYSTATEZIP
CLEANSTRING
CLEANSTRING2
COUNTRYCODE
COUNTRYNAME
CRPVERIFY
CSZ
DATEVERIFY
EINVERIFY
EMAILVERIFY
FDMSGPAGE
FULLSTATE
IDVERIFY
ISNUMERIC
LAYOUT
NAMESPLT
NULLTRIM
OVRNUM
OVRNUM2
OVRPER
OVRSTR
OVRSTR3
OVRSTR4
SCRNEXIST
SOSVERIFY
STABBRE
TRUEFALSE
WRAPTEXT
YES_NO
ZIPVERIFY
ZSTUFF
ZSTUFF2

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34eeb8ee4c764a0487f3a0dbcbce7916

Headers

File Characteristics

Imports

comctl32

kernel32

oleaut32

user32

wsock32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 72KB

.data Size: 8KB - Virtual size: 10KB

.link Size: 2KB - Virtual size: 1KB

.rloc Size: 3KB - Virtual size: 2KB

.text
Size: 72KB - Virtual size: 72KB

.data
Size: 8KB - Virtual size: 10KB

.link
Size: 2KB - Virtual size: 1KB

.rloc
Size: 3KB - Virtual size: 2KB