c445d2c98d85325377a92342ee70b078[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c445d2c98d85325377a92342ee70b078.bin
Size

8KB
MD5

c445d2c98d85325377a92342ee70b078
SHA1

024767fa9c5678ed0f1dc12977562b7b050df324
SHA256

a1f9b76ddfdafc47d4a63a04313c577c0c2ffc6202083422b52a00803fd8193d
SHA512

6079f036d744f86891d91893b249940a702e220e06d95772946bb64e82a77538076a684bceb953dd3fedf4c5664888f904bc54d4f53d892f58ba71fc1852f8d5
SSDEEP

192:Uti8GGG2EcuOMAL42Xz6OvN9p9TRe/tT1Snqj700quE0j0c0:Utos+Oy2j9TRW1Fj70zo0c0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c445d2c98d85325377a92342ee70b078.bin

Files

c445d2c98d85325377a92342ee70b078.bin
.dll windows x86

6aec756164c311e0a56a2e8c6299044b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetFileSize
VirtualFree
ReadFile
lstrcatA
FindFirstFileA
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
lstrcpyA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Exports

Exports

GetFullLangFileNameW2
compress
decompress
get_setting
size_compressed
size_decompressed

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 969B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ