2e3b537a8621dfb601c7386e179c6878618d4fbf1869e5f514bb8919113201ffN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e3b537a8621dfb601c7386e179c6878618d4fbf1869e5f514bb8919113201ffN
Size

3KB
MD5

feea0c871a7c330a6d1ec1331381ab00
SHA1

d3a4966efdae4c1d8efd30eaba428fe193f45df5
SHA256

2e3b537a8621dfb601c7386e179c6878618d4fbf1869e5f514bb8919113201ff
SHA512

e037d8c46386ed08e42e776c7d1df9d55371875a550c81050fac31e5f71e69d2e4db6513b7cf69c0fb4f533bdd1cc109807681f304e9cc490d1bb8e33fc1a74b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e3b537a8621dfb601c7386e179c6878618d4fbf1869e5f514bb8919113201ffN

Files

2e3b537a8621dfb601c7386e179c6878618d4fbf1869e5f514bb8919113201ffN
.dll windows:4 windows x86 arch:x86

5d31336b202080d234083f578f74496f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

wcschr
RtlGetCurrentPeb
swprintf
wcsrchr

urlmon

URLDownloadToFileA

kernel32

DeleteFileA

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

Exports

Exports

GetTest

Sections

.text
Size: 1024B - Virtual size: 850B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ