3ecf43ca49c573c3919f98d8a08554fe257a0159b425d5a4afa6958c1425fd0c | Triage

Sharing

General

Target

3ecf43ca49c573c3919f98d8a08554fe257a0159b425d5a4afa6958c1425fd0c
Size

8KB
MD5

988ef9381430f52d5935522e00776a6d
SHA1

640b6a4764be69f361964d1866ff4f93bce3cd11
SHA256

3ecf43ca49c573c3919f98d8a08554fe257a0159b425d5a4afa6958c1425fd0c
SHA512

daa6940760bc6b24fc8100c7b3e7970bc9c9cde5cd83f318b1020cdb724f8a731a14bd584bf2b65d19d17e4ced76a73407b09bb4ac8a9c016336a090d46b1317
SSDEEP

192:bLHBKpbUD5jKXvR8IoN6NttjL2XbRLe+Ob03z+LRq5Oj:bsbUFKXyI5PtP2XbR2b+u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ecf43ca49c573c3919f98d8a08554fe257a0159b425d5a4afa6958c1425fd0c

Files

3ecf43ca49c573c3919f98d8a08554fe257a0159b425d5a4afa6958c1425fd0c
.dll windows:5 windows x86 arch:x86

bab287abd34888be50035187199a1350

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
Sleep
ReadFile
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetTempPathA
CreateThread

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ