3985bacaf4bba68383ce67fb847f83229b5e0824de43c2eed54661e8e3af1a49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3985bacaf4bba68383ce67fb847f83229b5e0824de43c2eed54661e8e3af1a49
Size

8KB
MD5

75701a48f121ddf1a0752c1e9a639e53
SHA1

d25c24aa0777c7a98afd9bf3e59879a8836cee95
SHA256

3985bacaf4bba68383ce67fb847f83229b5e0824de43c2eed54661e8e3af1a49
SHA512

c9cdb5393e7985d1b5bd6bb36ea14ba727ff99da74b450a1bf7ffb1de46d994df0043feded1adc896fffe3278b12660e76d505c96dfc9576f8d98826f607b51d
SSDEEP

192:jLHBKpbUD5jKXvR8QtQN6Oz2AlxaKPRzOXxqbEt:jsbUFKXyQfY2YxaKP5vbE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3985bacaf4bba68383ce67fb847f83229b5e0824de43c2eed54661e8e3af1a49

Files

3985bacaf4bba68383ce67fb847f83229b5e0824de43c2eed54661e8e3af1a49
.dll windows:5 windows x86 arch:x86

bab287abd34888be50035187199a1350

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
Sleep
ReadFile
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetTempPathA
CreateThread

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ