9bd558b44ffd112ec9e0b34baf4ee0d7bc2b0f41296a8f9801e749f127910a7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bd558b44ffd112ec9e0b34baf4ee0d7bc2b0f41296a8f9801e749f127910a7e
Size

1.2MB
MD5

5c4e8c695372c4f28251b56c7323405c
SHA1

808f07b139420450747bb1474292e1dfefc74cda
SHA256

9bd558b44ffd112ec9e0b34baf4ee0d7bc2b0f41296a8f9801e749f127910a7e
SHA512

2d846e9a443de8bc8720f8bc211b0e29a86f16e9d3204bf63c7da680242dd264c70ae840ad1868dd150986a0743a817129be45a0515e8648a5826473cc490618
SSDEEP

24576:Zu2BMNQLIUinSyyWasQzFyfr5EGNPqcsFNfSy0qOklh2:ZlBMlSyzfi6yVxlE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bd558b44ffd112ec9e0b34baf4ee0d7bc2b0f41296a8f9801e749f127910a7e

Files

9bd558b44ffd112ec9e0b34baf4ee0d7bc2b0f41296a8f9801e749f127910a7e
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

changecard
changepassword
createcard
getpatientinfo
hadcard
lockcard
logoutcard
lostcard
resetpassword
unlockcard
unlostcard

Sections

CODE
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 289B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ