117bd0f656607df638e6f606638d9c94cecd116c083aae33c1459ca987512f56 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

117bd0f656607df638e6f606638d9c94cecd116c083aae33c1459ca987512f56
Size

16KB
MD5

7f203863ecc9636726b47801e031ae82
SHA1

91d3fefef4c0d559ea72a25d31f81618108d2de4
SHA256

117bd0f656607df638e6f606638d9c94cecd116c083aae33c1459ca987512f56
SHA512

1eb232fbc6436297590055cc5b000e84c9860840109ce4b5fab440a7c5e4e20b61d93aac8ffc99924af806be0daac2286c2d130466473ba8d9897d011d62d35e
SSDEEP

24:e1GSgDSEhlCglIB6SXvVmMPFjvhBrDsqZ:SgDbllVImgFNBsG

Score

N/A

Malware Config

Signatures

Files

117bd0f656607df638e6f606638d9c94cecd116c083aae33c1459ca987512f56
.dll windows x86

6c8408bb5d7d5a5b75b9314f94e68763

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls

Exports

Exports

ArcFourCrypt
ArcFourInit
ISCryptGetVersion

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ