7181c1792188bf2eb45d783c71dfa96cb6e8471c849fe6ed633f06a05f8e95e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7181c1792188bf2eb45d783c71dfa96cb6e8471c849fe6ed633f06a05f8e95e0
Size

4.9MB
MD5

1c9771730b5b4a190845c086e1d46a0a
SHA1

b43d1f6fed55d2f3b9695e932f068119dadc5c95
SHA256

7181c1792188bf2eb45d783c71dfa96cb6e8471c849fe6ed633f06a05f8e95e0
SHA512

2de70c9cdb4bc6db941aee9888d9a1f3776e461841b70cf41ebe67af10b7a81a3c4b2d95334f942ab69cb68c8b0fbfe907857876bf159a27233b3f8eb7e73eef
SSDEEP

98304:ULaPEADmIEwLYn9tzAfGS3w/SZu+FLtefsyU4od88pPJM:5xDxEvn8uS31o4gUN8gPJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7181c1792188bf2eb45d783c71dfa96cb6e8471c849fe6ed633f06a05f8e95e0

Files

7181c1792188bf2eb45d783c71dfa96cb6e8471c849fe6ed633f06a05f8e95e0
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CmAccess
CmDecryptPioData
CmGetInfo
CmGetLastErrorCode
CmGetSecureData
CmRelease

Sections

CODE
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ