3db6450fa22b1ee968a7d33cf26d57a5750776fd5f99c6608e86644fb0c227ef | Triage

Sharing

General

Target

3db6450fa22b1ee968a7d33cf26d57a5750776fd5f99c6608e86644fb0c227ef
Size

2.7MB
MD5

3ebce01d3aaf7f1e09bdeebb40d410c8
SHA1

109507e6e8ef09229183185eee169961150a0332
SHA256

3db6450fa22b1ee968a7d33cf26d57a5750776fd5f99c6608e86644fb0c227ef
SHA512

3bae26ab745adedcfb0dfae1423595c011d330baa42b91ada0d739217b5d9d4a6313cdc6d052e6de04a0bdf41ffa0184ca29987d3db3c849f61a2cde9f908d58
SSDEEP

49152:DU+ThQY8b0W+FzBLWzK77f0c4kxgCF6ftdRvMNtyXh:D/2YM0Wk9a0LKkx361jEDyx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3db6450fa22b1ee968a7d33cf26d57a5750776fd5f99c6608e86644fb0c227ef

Files

3db6450fa22b1ee968a7d33cf26d57a5750776fd5f99c6608e86644fb0c227ef
.dll windows:5 windows x86 arch:x86

393bcc729bcf7fa621781e6e5d18d614

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

SafeArrayCreate

kernel32

GetStringTypeA
OutputDebugStringA
GetModuleHandleW
DebugBreak
GetModuleHandleA

mprapi

MprAdminBufferFree

user32

DestroyIcon
FlashWindowEx
EnableWindow
SetDlgItemTextA

msvcrt

memset

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ