020653d8b631edbe5d3c701c601d60cc725fbd4d91507ccbabf3f36e140736e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

020653d8b631edbe5d3c701c601d60cc725fbd4d91507ccbabf3f36e140736e9
Size

5.3MB
MD5

1e8f85b6d12c418a1a96a12af4b8e9db
SHA1

939c17e4bad335f4b897b2ebe688b9dbd3a9afae
SHA256

020653d8b631edbe5d3c701c601d60cc725fbd4d91507ccbabf3f36e140736e9
SHA512

18694212fda2756250243258f732bf8e584c66a7374bd06a49523a45d317393ce28d1ef9a3b7b9cbe0db27e91107687ae8bce08c161f7f2ca352ef896e1c7989
SSDEEP

6144:KZ4xCFqIYWSRl40RGRXfUDsTneymTfrZ5ymlVFHLoDm2mxX+Es5lXMFI3Q5ymlV:KZ4xmqI9SfEXCgmB5rfpbvj5rsmEcV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
020653d8b631edbe5d3c701c601d60cc725fbd4d91507ccbabf3f36e140736e9

Files

020653d8b631edbe5d3c701c601d60cc725fbd4d91507ccbabf3f36e140736e9
.dll windows:6 windows x64

74abd25a7ee82ed1dba6d64d69639ecd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent

Sections

.text
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ