9a3dab3475cd215a471ff5198cf2e2ced41d5589f8e2f8bd337a739c18438d99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a3dab3475cd215a471ff5198cf2e2ced41d5589f8e2f8bd337a739c18438d99
Size

1.6MB
MD5

5d22dac6880ada09cf4095b4337842aa
SHA1

a06649c517d391ebdc970079970fb453348ee5f1
SHA256

9a3dab3475cd215a471ff5198cf2e2ced41d5589f8e2f8bd337a739c18438d99
SHA512

7e60d6090ba01cb86af038e2200f4f73ab064059bbc9ea1b37ecdff144d1582e71f618d61b2a688bde74a75f09d5b1039b1a504f23af9f51ca5186bb9414d5cd
SSDEEP

49152:3Z/KWulw2FLy85zHKIVRxS6QZHhI3p9jS6z3vdMPYRn:3dKZ2K95zTHSzZBQ7dMQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a3dab3475cd215a471ff5198cf2e2ced41d5589f8e2f8bd337a739c18438d99

Files

9a3dab3475cd215a471ff5198cf2e2ced41d5589f8e2f8bd337a739c18438d99
.dll windows:5 windows x86 arch:x86

fdb5a536990c89c8190cad404d262b32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

SetDCPenColor

oleaut32

GetRecordInfoFromGuids

msvcrt

wcscoll

kernel32

SetPriorityClass
AreFileApisANSI
GetModuleHandleA
OutputDebugStringA
GetStringTypeA
GetModuleHandleW

mprapi

MprAdminGetErrorString

user32

SetForegroundWindow
FreeDDElParam

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 93B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ