a3991096d7364bdeba9f96dfadbe7ea5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3991096d7364bdeba9f96dfadbe7ea5
Size

286KB
MD5

a3991096d7364bdeba9f96dfadbe7ea5
SHA1

3d8d983bb91f0302600767c9599e3ab7d60b1909
SHA256

008839caf2286e241d557c4eddae10d1ce9866c6cec360b1bf1e7c952cdc4d44
SHA512

d21c1b9fe03d0ac5887a473f20c949c408869f836ee9dbd8be2cd5f2003a36ec438422697f52f11bd8a388899b4d8130e5f3c2a7ff5406d0a6af1b0c7116c00b
SSDEEP

6144:NKJDNGZzo0ePeW4rLJZOho/8EYiJl3Ou/msGZttqilWADEUy/XRs:Ny+o06ebPJZeil3Ou/ms8HIcETvO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3991096d7364bdeba9f96dfadbe7ea5

Files

a3991096d7364bdeba9f96dfadbe7ea5
.dll windows:4 windows x86 arch:x86

c48974380728ea1e5c25ed2f415595e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetMenuInfo
RegisterClassA
OffsetRect
MessageBoxIndirectA
LoadBitmapA
LoadAcceleratorsA
GetDC
GetCursor
FillRect
EndDialog
DestroyCaret
CreateMDIWindowA
CreateDesktopW
CreateAcceleratorTableA
CharNextA
ChangeMenuA

kernel32

GetLocalTime
OpenFile
LeaveCriticalSection
GetVersion
GetSystemTimeAsFileTime
GetLastError
GetFileSize
FlushFileBuffers
lstrcpynA
VirtualAlloc
UnmapViewOfFile
TlsSetValue
SleepEx
SetLastError
SetEndOfFile
SetCurrentDirectoryA
EnumResourceLanguagesA
EnumResourceNamesA
ExitThread
ReadFile

oleaut32

GetErrorInfo
OleIconToCursor
OleLoadPicture
RegisterTypeLib
SafeArrayDestroy
VarBstrCmp
ClearCustData

Sections

.text
Size: 38KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 242KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ