d3917af0432540bc9b405ed87b69c6e1

General

Target

d3917af0432540bc9b405ed87b69c6e1
Size

15KB
MD5

d3917af0432540bc9b405ed87b69c6e1
SHA1

6ea20ff921431b740b076b97e8950bc72f9a45c1
SHA256

824fa544821a28b51ee3d5157761d383645636db90cd1ac3f9a34d3bc9963fad
SHA512

976e9c7bf9b71c4c5338bd3ae0b34d1d5d9fee738100380bbea0bc96abb261655434312d79b153c553124008fd84cc246b3ca44b0805287316fca94bbbde2051
SSDEEP

384:9mgss1W8twKo0fMqbnApRUvaD6Gad0qXTh3bh:sgHXtvZEqbApRGjBNV3b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3917af0432540bc9b405ed87b69c6e1

Files

d3917af0432540bc9b405ed87b69c6e1
.dll windows:4 windows x86 arch:x86

65244a63620cfa1a653134340ddeb386

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetStartupInfoA
CloseHandle
WriteFile
OpenFile
lstrcatA
GetWindowsDirectoryA
lstrlenA
VirtualFree
GetLastError
VirtualAlloc
HeapAlloc
GetVersion
HeapReAlloc
HeapFree
InitializeCriticalSection
GetTickCount
LeaveCriticalSection
EnterCriticalSection
ExitThread
WaitForSingleObject
DeleteCriticalSection
SetLastError
CreateProcessA
ExitProcess
FreeLibraryAndExitThread
Sleep
CreateThread
GetProcessHeap

advapi32

RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

user32

wsprintfA

ws2_32

shutdown
__WSAFDIsSet
send
recv
WSAGetLastError
WSACleanup
WSAStartup
connect
closesocket
htons
inet_addr
gethostbyname
bind
htonl
setsockopt
getsockname
getsockopt
listen
accept
socket
ioctlsocket
select

shlwapi

StrToIntA
StrCSpnA
StrStrA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 994B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65244a63620cfa1a653134340ddeb386

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

ws2_32

shlwapi

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 994B

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 994B