c75d94792094b5224bc82fbe986f22ecd6795f03cbf4329b0919a163432b5b51 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c75d94792094b5224bc82fbe986f22ecd6795f03cbf4329b0919a163432b5b51
Size

1.1MB
MD5

529a9d09ae24f21b6f75d1a9d1ea6c11
SHA1

d05981bf795889b9779331d7cbb717536ff75eb4
SHA256

c75d94792094b5224bc82fbe986f22ecd6795f03cbf4329b0919a163432b5b51
SHA512

3b8cec90281e8ca4998f6baf6e7ef6a923c59c4eba223a27a71551f5079aaeb9b343d921ea5c19eb8505e5ea03f6aa4398ee677067caa147265d4a42884ec3a0
SSDEEP

24576:zig6TcB+LoqSZQRbw+NAybxJFClvn6IIYMDlJZsQ:ziy+LoqGQRbCIIPMDlJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c75d94792094b5224bc82fbe986f22ecd6795f03cbf4329b0919a163432b5b51

Files

c75d94792094b5224bc82fbe986f22ecd6795f03cbf4329b0919a163432b5b51
.dll windows:4 windows x86

2dec5390013cfdb21813e836f2da12aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord823
ord1168
ord342
ord1253
ord1182

msvcrt

_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
??3@YAXPAX@Z
exit
_except_handler3
_CxxThrowException
__CxxFrameHandler

kernel32

HeapFree
HeapAlloc
HeapReAlloc
VirtualFree
FreeLibrary
CopyFileA
Sleep
ExitProcess
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
GetProcessHeap

Exports

Exports

HackCheck
cef_api_hash

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ