3e3a0922a99c911f38aeadc9417118f0N | Triage

Sharing

General

Target

3e3a0922a99c911f38aeadc9417118f0N
Size

164KB
MD5

3e3a0922a99c911f38aeadc9417118f0
SHA1

a9b0776ee6a106c6816bfc9297bc9f3f1b325e03
SHA256

cd9045fd136792eec5991b6dd0c75bcfea50e4fe6b19637be3cc0fbb52942041
SHA512

b41a1093bdefb21d82e19e5fb0a2cca3cd605482d60d66689d2e9262e08521501a8db41d67a9a1b38541c618c29484188b1891102e25805ac0b566f6a42b4d9c
SSDEEP

3072:WAkzrvTXX6m6acOf1QwRBsdeUb8Oy7YuLg0Gjj5D:ivvbLdRAesA7YU2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e3a0922a99c911f38aeadc9417118f0N

Files

3e3a0922a99c911f38aeadc9417118f0N
.dll windows:5 windows x86 arch:x86

8c139089d78137abf164f71dfb6637c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
LoadLibraryW
GetModuleHandleA
GetFileAttributesA
CreateMailslotA

user32

GetFocus

advapi32

InitiateSystemShutdownW
RegSaveKeyExA

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ