1590048[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1590048.dll
Size

103KB
MD5

8745ce8a59cc9cf6fbecbd04d829fbf4
SHA1

e8e43f4740db582d5b5a0a33d44daaebddf10a93
SHA256

7061f96ab5504b1acd314979af67e9697db3b8345fe58dd2328571ced33ced8c
SHA512

98b946c2f3764eebcd940cb9f014e8f193668a155d68262cd38073ee83f1d063eab9f2a1720db35b513ac20641a743f6de4ea8f6bf7fed0fefc0b5e5a4a7cbd6
SSDEEP

1536:2O7s7wqqGfdXfbMny0eDEgU5ZOw9mbNFG7x6pt9Dvdp8R+jHb546+qUlE4SJrIXi:jsOGfBMy0117esKhpV46+8raXP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1590048.dll

Files

1590048.dll
.dll windows x86

cd99bce8ebad6bc5866d19d9d387c282

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strcat
memcpy
malloc
realloc
strtok_s
atexit
memset
memcmp

kernel32

VirtualFree

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ