DirectPlay8LobbyCreate
Static task
static1
Behavioral task
behavioral1
Sample
30a24ada6d91c5db1ec73b91bea01140N.dll
Behavioral task
behavioral2
Sample
30a24ada6d91c5db1ec73b91bea01140N.dll
General
-
Target
30a24ada6d91c5db1ec73b91bea01140N.exe
-
Size
34KB
-
MD5
30a24ada6d91c5db1ec73b91bea01140
-
SHA1
a119080fc71816443551ce02d2653cb83aa745f7
-
SHA256
8af7d29d4d96bb4384ed79edeacc4acd18c8c6ee3e553077aeb199b172900708
-
SHA512
71d75c98dd71eb240d1c0f8f90e7b44f70d494a506f64f106bfec92681a5125dd5ea851d9b37d2e4738b72b792ff32d48da1d98f22ea6cabb550a40b1c106ea3
-
SSDEEP
96:IeOGNcmcWM7jyd0qBz5H7y0ilsFrZHvvYrO:I3AcWKjZ/+VZ3YrO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30a24ada6d91c5db1ec73b91bea01140N.exe
Files
-
30a24ada6d91c5db1ec73b91bea01140N.exe.dll windows:4 windows x86 arch:x86
6c8408bb5d7d5a5b75b9314f94e68763
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
DisableThreadLibraryCalls
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 80B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 4KB - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 165B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ