668a16292b03af3964343d9a89a487491b8d2c23cc12d55a7359bcc1efcc6f3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

668a16292b03af3964343d9a89a487491b8d2c23cc12d55a7359bcc1efcc6f3d
Size

4.6MB
MD5

0754d797754fcb37bd183ec7e9bc0495
SHA1

ed758b9fbc65beaa091208eade3c57c215398265
SHA256

668a16292b03af3964343d9a89a487491b8d2c23cc12d55a7359bcc1efcc6f3d
SHA512

53e06172ca69e7dab7de35a4208ffe220e03d285622ebc7d955711717aee19db1bc0f33b96626e8b70ef459ac54661dee7aaeec8ef27b520c4c0a914081725ab
SSDEEP

24576:70panHRbmrLoRuWplwSkgkkht+R7OUgxlRcMAiAhCWeH0D+OmqnnHIOi/oOBN:NlpRXzkGt+R7OUgxrcMAiAYQgOHygOB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
668a16292b03af3964343d9a89a487491b8d2c23cc12d55a7359bcc1efcc6f3d

Files

668a16292b03af3964343d9a89a487491b8d2c23cc12d55a7359bcc1efcc6f3d
.dll windows x86

6d4de3f9e07985fe6a3b336049dbc597

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc110

ord2189
ord484
ord2211
ord2316
ord1498
ord1500

msvcr110

__CxxFrameHandler3
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_except_handler4_common
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
_lock

kernel32

GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ