0ad40832a8f86bd7fd8185eb422df6fa657f7b3a568c831bc297759e6ad70d4d

General

Target

0ad40832a8f86bd7fd8185eb422df6fa657f7b3a568c831bc297759e6ad70d4d
Size

43KB
MD5

6fe50eed754454e07538ef5f0fd44f92
SHA1

eb2fdc57297624da0a83c966f6b6aaa9f6e7aecd
SHA256

0ad40832a8f86bd7fd8185eb422df6fa657f7b3a568c831bc297759e6ad70d4d
SHA512

3008edfa63063d8158a4f07c7a56d8407eb427c6d596b0de2568f2032f412ce64e0db65f4c7d3e134e37558f8bf72e95e83c5030480a541a008909686b9ed45d
SSDEEP

768:6YzsysjDaKyNzZxcEIjGD2uhSGzZeTd/taH90skEk8dl4QTbE8UTQ4g/y5Q4+9KY:JgysjKzzZeTd/taH90skEkyl4QTbE8Ui

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ad40832a8f86bd7fd8185eb422df6fa657f7b3a568c831bc297759e6ad70d4d

Files

0ad40832a8f86bd7fd8185eb422df6fa657f7b3a568c831bc297759e6ad70d4d
.dll windows:4 windows x86 arch:x86

a7bdf027ee8bbacb3d601183c3ad92ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\dev\server2\Steam\src\drm_rel_june09\release\survey.pdb

Imports

rpcrt4

UuidCreate

kernel32

LeaveCriticalSection
EnterCriticalSection
SetLastError
LockResource
SizeofResource
LoadResource
FindResourceW
GetLastError
HeapAlloc
GetProcessHeap
HeapFree
lstrcmpiA
FindClose
FindNextFileW
FindFirstFileW
InitializeCriticalSection
lstrcmpiW
GetFileInformationByHandle
CreateFileW
DisableThreadLibraryCalls
GetSystemDirectoryW
GetWindowsDirectoryW
GetProcAddress
GetModuleHandleA
DeleteCriticalSection
DebugBreak
CloseHandle
GetVolumePathNameW

version

VerQueryValueW

advapi32

RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegSetValueW
RegCloseKey

ole32

StringFromGUID2

Exports

Exports

_runfunc@20

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7bdf027ee8bbacb3d601183c3ad92ba

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

rpcrt4

kernel32

version

advapi32

ole32

Exports

Exports

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 216B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 216B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB