db40bcc8978e6433e8451c09a352594220ebc4a1624955dca1ac9c0c486454f8

General

Target

db40bcc8978e6433e8451c09a352594220ebc4a1624955dca1ac9c0c486454f8
Size

30KB
MD5

6a1f749c1a5526d783c44aeebe8f64e3
SHA1

34518da3499a3a807cc6f194bde044df25095668
SHA256

db40bcc8978e6433e8451c09a352594220ebc4a1624955dca1ac9c0c486454f8
SHA512

d83fe30ea9799e61c803ff540553d6a77ea14d7e6489b593d1acca6f6892c0e5d08c9b90a51c452e8c01388b2816e17cbeb0aa4d3605fae67c87a18e06ede06e
SSDEEP

768:vLdASoVOL1MGGUqCoav6goQtohff2OzUdN:BASoopvjoQmzoN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db40bcc8978e6433e8451c09a352594220ebc4a1624955dca1ac9c0c486454f8

Files

db40bcc8978e6433e8451c09a352594220ebc4a1624955dca1ac9c0c486454f8
.dll windows:4 windows x86 arch:x86

95599902eaf375f30a3962fafa357329

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ddraw

DirectDrawCreate

kernel32

AddAtomA
CloseHandle
CreateEventA
FindAtomA
GetAtomNameA
MultiByteToWideChar
WaitForSingleObject

msvcrt

__dllonexit
_errno
abort
fflush
free
malloc
memmove
sprintf

ole32

CoCreateInstance
CoInitialize
CoTaskMemFree
CoUninitialize

Exports

Exports

dsw_audio_info
dsw_audio_open
dsw_audio_read
dsw_close
dsw_video_info
dsw_video_open
dsw_video_read

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 160B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

95599902eaf375f30a3962fafa357329

Headers

File Characteristics

Imports

ddraw

kernel32

msvcrt

ole32

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 64B

.rdata Size: 15KB - Virtual size: 14KB

.bss Size: - Virtual size: 160B

.edata Size: 512B - Virtual size: 232B

.idata Size: 1024B - Virtual size: 760B

.reloc Size: 512B - Virtual size: 340B

.rsrc Size: 1024B - Virtual size: 844B

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 64B

.rdata
Size: 15KB - Virtual size: 14KB

.bss
Size: - Virtual size: 160B

.edata
Size: 512B - Virtual size: 232B

.idata
Size: 1024B - Virtual size: 760B

.reloc
Size: 512B - Virtual size: 340B

.rsrc
Size: 1024B - Virtual size: 844B