a3497328f267f8252beb21a764c918568e7b7f9c1e33ebad3ba1e3d918113783

General

Target

a3497328f267f8252beb21a764c918568e7b7f9c1e33ebad3ba1e3d918113783
Size

15KB
MD5

786612da442b97e682db5d22f18f9986
SHA1

965c56b5837c7cef466cece8e303012a6c44f454
SHA256

a3497328f267f8252beb21a764c918568e7b7f9c1e33ebad3ba1e3d918113783
SHA512

edafadc9a30509b967eede8d5372d2bd82d9a1c26b6adc88906d539c2c60823ff90901b0a8ef250dcd06abeb4bdd57d87ee2c1ed086a3069e669e03f79efc765
SSDEEP

384:8FnBbc33ZLN8OqX6wSMIqZEShnWCe5Kqj1qmSxaD2T3W9pyNL4KbW:vTSlW75xj183SyNL4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3497328f267f8252beb21a764c918568e7b7f9c1e33ebad3ba1e3d918113783

Files

a3497328f267f8252beb21a764c918568e7b7f9c1e33ebad3ba1e3d918113783
.dll windows:6 windows x86 arch:x86

81f5e24d00c0acb322b069b7dc1621e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\joshy\Desktop\Lord of the Cheats\Blank DLL\Release\DayZSAPub.pdb

Imports

kernel32

VirtualProtect
GetCurrentProcessId
VirtualQuery
GetCurrentProcess
Sleep
FlushInstructionCache
GetProcAddress
GetModuleHandleA
CreateThread
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

msvcp120

?_Winerror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z

msvcr120

??2@YAPAXI@Z
sprintf
strstr
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??3@YAXPAX@Z
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_except_handler4_common
?terminate@@YAXXZ
__clean_type_info_names_internal
_purecall
malloc
free
memmove
??1type_info@@UAE@XZ
mbstowcs
_CxxThrowException
__CxxFrameHandler3
_libm_sse2_sqrt_precise
memcpy

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81f5e24d00c0acb322b069b7dc1621e5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcp120

msvcr120

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 976B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 976B