eafb5173af265109c433280cbbff545ce59a8f833758b18de8698873702444bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eafb5173af265109c433280cbbff545ce59a8f833758b18de8698873702444bf
Size

9KB
MD5

464241721707c14ca657dd6bc52bd6fe
SHA1

1d8945fa1c4b473b0f59005685f8b4fca249225c
SHA256

eafb5173af265109c433280cbbff545ce59a8f833758b18de8698873702444bf
SHA512

39722d79268062da19fad479f5d5d7b5c02ad6e61ad17172725f35bf777661588378236961d55f7c54a13b9c5ba8ad5194ae9047e799f32d1f75b4c4aa88a5ba
SSDEEP

192:4EwMJ2Xw5GYqOpkUZ/KmEBjOvg/yRjJotRo7:h8wUOpdgmMjgmyRat2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eafb5173af265109c433280cbbff545ce59a8f833758b18de8698873702444bf

Files

eafb5173af265109c433280cbbff545ce59a8f833758b18de8698873702444bf
.dll windows:6 windows x86

adfa881b47511cf18b37e9dc86fac1c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileAttributesW
GetModuleFileNameW
DisableThreadLibraryCalls
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

user32

wsprintfW

shlwapi

PathRemoveFileSpecW

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_cexit
_execute_onexit_table
_initterm_e
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ