3918a5248333d9d68eb4a7c68f72b93806626aa2cfaa48c6bf2042cef2265c58 | Triage

Sharing

General

Target

3918a5248333d9d68eb4a7c68f72b93806626aa2cfaa48c6bf2042cef2265c58
Size

4.7MB
MD5

a467e5c628a9fc9c21ee78d577e1d7b2
SHA1

f29d6dcd44a25a5cb25e936f29d7913914cca6f9
SHA256

3918a5248333d9d68eb4a7c68f72b93806626aa2cfaa48c6bf2042cef2265c58
SHA512

9986a76e39f71e2b345d076c9c9f360a6e40c92e56f6b3db4bc1484e1757a23d1f11392ba6f68d8f74241c0af5619502894bbe63f854a4704ab3c62ad14e209c
SSDEEP

98304:XfKvdjBBRLhaAfvgQHWyQLAFdH8zsgI9ElpG6XVLM/22wBGp68NjriBL3Io:vKvdjdL1vxWyQLmdcIzmlpGYoyopRKLV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3918a5248333d9d68eb4a7c68f72b93806626aa2cfaa48c6bf2042cef2265c58

Files

3918a5248333d9d68eb4a7c68f72b93806626aa2cfaa48c6bf2042cef2265c58
.dll windows:6 windows x86 arch:x86

b4ca6f0ad0fe5ce382aa3bee0f2fba93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

Exports

Exports

_SbieDll_Hook@16

Sections

.text
Size: - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c+w
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.*rn
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SXP
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ