83c9bcb7ffa2ef893a76f110777f6e30d4481a56990ff908c1257a474be791f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83c9bcb7ffa2ef893a76f110777f6e30d4481a56990ff908c1257a474be791f3
Size

19KB
MD5

81e057598cba5d10cb03408efc48ef0f
SHA1

ba6234acf0f8a5cdfc49df2260460d79e51a3b09
SHA256

83c9bcb7ffa2ef893a76f110777f6e30d4481a56990ff908c1257a474be791f3
SHA512

1792c8da9e529d7ce6dfe7ef3a533b9543ea8c3a0a4d8e5c013abeccd816285772050e71c526097867d6cb52979191e9cda3f12272980666d5fae5d09d68e976
SSDEEP

192:1aEPHA/btkQwklKgMqWJRf/jO09stfITzar8Ab2MXB4VWJYI+4RBIy4sEFSrzdFx:1AtkQvlReJl/jfmfWjQSOkSf/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83c9bcb7ffa2ef893a76f110777f6e30d4481a56990ff908c1257a474be791f3

Files

83c9bcb7ffa2ef893a76f110777f6e30d4481a56990ff908c1257a474be791f3
.dll windows:6 windows x86

cb2eca5a0bef6465902205fe38a836d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

vcruntime140

__current_exception_context
__std_type_info_destroy_list
__current_exception
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
terminate
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment

kernel32

SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ