9958a57ee53fde4c7876253b4bd2e0d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9958a57ee53fde4c7876253b4bd2e0d3
Size

240KB
MD5

9958a57ee53fde4c7876253b4bd2e0d3
SHA1

b931ccf7dcc6ac1aecf023b73a3cf78963119a1c
SHA256

28b136d468b9e09090403d8b9e09722d7867f245e4092680cd40d7a3cff6db61
SHA512

85f6c0801106ea1950a8270e70d4e9549c19a51f03053c6f1ea220f336b482636f3aaad0c153e73f78a2c5b31683d59930f5b78fabc428bf383132dd4cfe2151
SSDEEP

3072:lhkJ8Cy/b15q15ihkJ8Cy/b15q15q15q15ihkJ8Cy/V:lkgh5g5ikgh5g5g5g5ikgV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9958a57ee53fde4c7876253b4bd2e0d3

Files

9958a57ee53fde4c7876253b4bd2e0d3
.dll windows:6 windows x86 arch:x86

939c925ad24b5326d66117cd864242ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

X3DAudio1_3.pdb

Imports

msvcrt

_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter
_CIacos

kernel32

GetCurrentThreadId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
IsProcessorFeaturePresent
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange

user32

MessageBoxA

Exports

Exports

X3DAudioCalculate
X3DAudioInitialize

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ