45d738ed4b188fdc5bc97403c70404b9f2a2657995e2cdbbc488e91415ca7693

General

Target

45d738ed4b188fdc5bc97403c70404b9f2a2657995e2cdbbc488e91415ca7693
Size

8KB
MD5

f37e3807d48d1fdf3070be29e63c532d
SHA1

c6a03fe777a78289dddad1842c854ae5bce21ee7
SHA256

45d738ed4b188fdc5bc97403c70404b9f2a2657995e2cdbbc488e91415ca7693
SHA512

c62c41e1d9246bc0e4cc0cb2b9e706cb0770aebc67c280ffea5a15fe308555462b960fa27f90dc08cdb38bbe459c5783432943ec5847e803333c2c269f2db54b
SSDEEP

96:LW50BT1CeiUYN898klbcR+t1/SvAf3X3X3fPXf/3tnZCPH8FixzO1O:tBT1CeiUYN8OPUdS4nff/dn0PDzO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45d738ed4b188fdc5bc97403c70404b9f2a2657995e2cdbbc488e91415ca7693

Files

45d738ed4b188fdc5bc97403c70404b9f2a2657995e2cdbbc488e91415ca7693
.dll windows:4 windows x86 arch:x86

8db61b965045f625b2dc5cbc6304e6cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt-ruby191

onigenc_always_true_is_allowed_reverse_match
onigenc_apply_all_case_fold_with_map
onigenc_get_case_fold_codes_by_str_with_map
onigenc_is_mbc_newline_0x0a
onigenc_minimum_property_name_to_ctype
onigenc_not_support_get_ctype_code_range
onigenc_single_byte_code_to_mbc
onigenc_single_byte_code_to_mbclen
onigenc_single_byte_left_adjust_char_head
onigenc_single_byte_mbc_enc_len
onigenc_single_byte_mbc_to_code
rb_enc_register

kernel32

AddAtomA
FindAtomA
GetAtomNameA
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_assert
_errno
_iob
abort
fflush
free
fwrite
malloc
memcpy
memset
vfprintf

Exports

Exports

Init_iso_8859_3

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 212B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8db61b965045f625b2dc5cbc6304e6cf

Headers

File Characteristics

Imports

msvcrt-ruby191

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 212B

.edata Size: 512B - Virtual size: 80B

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 284B

.text
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 212B

.edata
Size: 512B - Virtual size: 80B

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 284B