dbc3755480f9e657e343a38a646d8d18f08cc0e84b9f7e7d6ad4d9441be5a2e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbc3755480f9e657e343a38a646d8d18f08cc0e84b9f7e7d6ad4d9441be5a2e9
Size

136KB
MD5

8f28823f76bed4e5ea9faa0426b72343
SHA1

ea16a79d2ff71cdb6f560e04a570f30b9e363d82
SHA256

dbc3755480f9e657e343a38a646d8d18f08cc0e84b9f7e7d6ad4d9441be5a2e9
SHA512

e0063090a52e6e258958aeacfba3b366cd85e38067910e418f4f09df6dfa00c0c6b6c0b98c78f4ca46fdae91842395fbb6d555a35dd55e9fcbd6909478f6c736
SSDEEP

3072:y9WjRS1kjdIIXtWJqZz/5DSiTQMW1bI7VJbcDdbppZGO:y9W1S1kj9Eq/9/WtiVJbcDTCO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbc3755480f9e657e343a38a646d8d18f08cc0e84b9f7e7d6ad4d9441be5a2e9

Files

dbc3755480f9e657e343a38a646d8d18f08cc0e84b9f7e7d6ad4d9441be5a2e9
.dll windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Exports

Exports

AMR_Decode_Exit
AMR_Decode_Frame
AMR_Decode_Init
AMR_Encode_Exit
AMR_Encode_Frame
AMR_Encode_Init
AMR_Get_Length

Sections

.text
Size: 73KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE