7702338dc6150cf12f0fa1eb595cf721 | Triage

Sharing

General

Target

7702338dc6150cf12f0fa1eb595cf721
Size

36KB
MD5

7702338dc6150cf12f0fa1eb595cf721
SHA1

80d0c04b234eaccd7aebb2ab52e6bdc1f9db7f25
SHA256

77e7547537f2986e12e17fce88b218d56f9446eebe186e4014bbb050cd8c72bc
SHA512

91ee134311ef934bccb2d1ac97b79594bcbbf12aada334870f2010a5d48e101ddb17d443775b6183e3037367eb248b4653da66aa3baa3fb1c36faba83d893805
SSDEEP

384:4sU66bRX0PF8/zDe+ZNlsBCCV+mzlYOmg3yscalDmtNPoPeHddB+o1wp7GcyvWid:t+ZNlal+mhUgisV4taGHddJ1oHcUu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7702338dc6150cf12f0fa1eb595cf721

Files

7702338dc6150cf12f0fa1eb595cf721
.dll windows:4 windows x86 arch:x86

0e6e2eb0fefdfe4a1ed58321e5dfb7ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CreateMutexA
FindAtomA
GetAtomNameA
InterlockedIncrement
ReleaseMutex
Sleep
WaitForSingleObject

msvcrt

__dllonexit
_errno
abort
fflush
fopen
free
frexp
ldexp
malloc
memset
modf
printf
putchar
sprintf
strlen
strncat
strtoul

Exports

Exports

xlsim_final
xlsim_genout
xlsim_init
xlsim_update

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 128B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ