8b2b6ec893a85f481a175a5fc38105ee

General

Target

8b2b6ec893a85f481a175a5fc38105ee
Size

10KB
MD5

8b2b6ec893a85f481a175a5fc38105ee
SHA1

814990d01f9904d750a5ce15227b946c180716f8
SHA256

e5986e5105b2c8c9518b1906f7ae1276d85744721a92c6e694dd96c37c8b0d38
SHA512

613f58e5fb5e658bad1cd8fbd5d54331c7aa5215274d4c32fd03768c851ceae1934ef4607c875b1db90addb65d1d57af6943b48e32c449e4e7f8c509b5e35e2a
SSDEEP

192:41hDNi/PvCnC8x6nRCJnhfMsOo/zDKcs:0ufCnCjRCvWus

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b2b6ec893a85f481a175a5fc38105ee

Files

8b2b6ec893a85f481a175a5fc38105ee
.dll windows:4 windows x86 arch:x86

e719e0d3db51b8c1db5fc4224ad309c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt-ruby191

OnigEncAsciiCtypeTable
OnigEncAsciiToLowerCaseTable
onig_is_in_code_range
onig_st_lookup_strend
onigenc_ascii_apply_all_case_fold
onigenc_ascii_get_case_fold_codes_by_str
onigenc_is_mbc_newline_0x0a
onigenc_mbclen_approximate
onigenc_minimum_property_name_to_ctype
onigenc_property_list_add_property
onigenc_property_list_init
rb_enc_register
OnigEncAsciiToLowerCaseTable
OnigEncAsciiCtypeTable

kernel32

AddAtomA
FindAtomA
GetAtomNameA
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_assert
_errno
_iob
abort
fflush
free
fwrite
malloc
memcpy
memset
vfprintf

Exports

Exports

Init_euc_jp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 292B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e719e0d3db51b8c1db5fc4224ad309c6

Headers

File Characteristics

Imports

msvcrt-ruby191

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 292B

.edata Size: 512B - Virtual size: 72B

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 332B

.text
Size: 4KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 292B

.edata
Size: 512B - Virtual size: 72B

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 332B