cd8718d97f58193172f3a9afaced62fe6040824d41da3e243a2ab2316ce0563e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd8718d97f58193172f3a9afaced62fe6040824d41da3e243a2ab2316ce0563e
Size

5.3MB
MD5

e55b900696135d35872e0a488d1d9df9
SHA1

dd76137c4d9e27b9f6fd250c0b3e8f447fea5b61
SHA256

cd8718d97f58193172f3a9afaced62fe6040824d41da3e243a2ab2316ce0563e
SHA512

b95d772293152da11d8e2d4568960c9dbee385b672ec4eca9736b81b26cb55ebd09b925e3250b98d6c505ab2d2778db85af868912c11bb6978fba69db1b6d508
SSDEEP

6144:tZ4xCFqIY2SRl40RGRXfUDsTneymTfrZ5ymlVFHLoDm2mxX+Es5lXMFI3Q5ymlVO:tZ4xmqIBSfEXCgmB5rfpbvj5rsmEcn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd8718d97f58193172f3a9afaced62fe6040824d41da3e243a2ab2316ce0563e

Files

cd8718d97f58193172f3a9afaced62fe6040824d41da3e243a2ab2316ce0563e
.dll windows:6 windows x64

74abd25a7ee82ed1dba6d64d69639ecd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent

Sections

.text
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ