6f6110e4aa65be4ddaabde76a488d39e78d37799e3d13c3743d18f6f1683884d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f6110e4aa65be4ddaabde76a488d39e78d37799e3d13c3743d18f6f1683884d
Size

16KB
MD5

5b2eafdf8516431868bed205cf155aab
SHA1

02dd7f8f63b759333a7625db404dabfc13d6a1f6
SHA256

6f6110e4aa65be4ddaabde76a488d39e78d37799e3d13c3743d18f6f1683884d
SHA512

4a3fd4bd82a554fc7d240634c47368eed8ddc72c06226533e79caeef64cfa4328da64c3b440e5f7d529abcb7ba9e565d94f205de02201c2c795b65e3e99ee9f4
SSDEEP

192:Q222tlTM8l1pISuuGYcqTfoA2FDpBI4TVLB5qKP+jgYirqpJI2fYrjn/+py0HVcx:dXLJxIS7cq8rFdZW8r0nfrpFNmM/s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f6110e4aa65be4ddaabde76a488d39e78d37799e3d13c3743d18f6f1683884d

Files

6f6110e4aa65be4ddaabde76a488d39e78d37799e3d13c3743d18f6f1683884d
.dll windows x86

34ea0c6501b8c8ee20a0fe5875859494

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

ioctlsocket

user32

SetTimer

msvcr80

__dllonexit

Exports

Exports

dcGetInterface

Sections

.text
Size: 11KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE