df63c12b68f7aa59618b0ffa0aa18f8127ee68f6d955050b674b11cac47f31ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df63c12b68f7aa59618b0ffa0aa18f8127ee68f6d955050b674b11cac47f31ce
Size

905KB
MD5

5ae58965048e5a631f2956e259d3a896
SHA1

c7b0c96a6f84a9df09885afdd36f66cabbfabe53
SHA256

df63c12b68f7aa59618b0ffa0aa18f8127ee68f6d955050b674b11cac47f31ce
SHA512

4045c3b89b7503d7a465c24ec902908123a5c13c91f2a1ebe38a6a4052c7629de4bdcc6f48f87b27fc3379b09138361b39ff0ab13e69db37e06ae55588de848d
SSDEEP

24576:1kP/IG++Ux4xcBIMoaHMQMRwqDKS1Isr5AiBxLD5Hn15G:mP/6xAaMQMqEJ5A0LDB+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df63c12b68f7aa59618b0ffa0aa18f8127ee68f6d955050b674b11cac47f31ce

Files

df63c12b68f7aa59618b0ffa0aa18f8127ee68f6d955050b674b11cac47f31ce
.dll windows:6 windows x86

903fa091c9ae1106e2ff14caa8425de8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 98KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.date
Size: 799KB - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.date
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ