c35769b7d8e93f95e6d09c4d17b7a67a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c35769b7d8e93f95e6d09c4d17b7a67a
Size

18KB
MD5

c35769b7d8e93f95e6d09c4d17b7a67a
SHA1

c30cafda0eb9a8c90ae048a0558f3303cb5b494f
SHA256

0a127148c3b66155943624600a934976ab4ebb25c730666f41e8bf6a93d80372
SHA512

b9ad66b9760163e036407b8487aa54858323053431f9276f613bcfad4a740110bab3bdd3a5a477812050626549151da5b4a72a02c7e966660a55130f3f0b44d2
SSDEEP

384:PO+RSocBXTn07wO/0DMvSmUNcf+fTXp604iKQzI:ZRSo2n0D/0DMvTUNs+fTXpX4nYI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c35769b7d8e93f95e6d09c4d17b7a67a

Files

c35769b7d8e93f95e6d09c4d17b7a67a
.dll windows:4 windows x86 arch:x86

bd5c2d5985eb5095d09cd8c1cafaf423

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateFileA
CreateProcessA
WriteFile
GetTempPathA
GetLocalTime
CloseHandle
SetThreadPriority
CreateThread
GetModuleFileNameA
DisableThreadLibraryCalls
VirtualAlloc
VirtualFree
GetSystemDirectoryA
DeleteFileA
Sleep
LoadLibraryA
TerminateThread
GetProcAddress

wininet

InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetCloseHandle
InternetReadFile

advapi32

ControlService
OpenServiceA
DeleteService
OpenSCManagerA
CloseServiceHandle

shell32

ShellExecuteExA

msvcrt

sprintf
strrchr
strlen
strcpy
strcat
memset
_except_handler3
memcpy

Exports

Exports

DriverProc
modMessage
modmCallback

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ