6e3112246134ee4d67410718aaaab948 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e3112246134ee4d67410718aaaab948
Size

125KB
MD5

6e3112246134ee4d67410718aaaab948
SHA1

2e3fe4d14f0541657b4ac9726c1779de6603eba9
SHA256

cf4620276f8f89a7d0121d9776a2923deca015647ba0cde4f6d5c8623a73e91f
SHA512

b58dd299b6dc8aff922a21a60972a5c5a394ff4c799b138f22722e646343d936c10f0113ca93c0b641059108a915837a5b00b82c624d6c6cfb4bbdf503e40249
SSDEEP

384:Zs8H1isuipwKCYO+7DOZPY8i3SUf4oWJL4tI5907/clHCkBcL:G8osLwKCL+769Y8iCUfHXag70e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e3112246134ee4d67410718aaaab948

Files

6e3112246134ee4d67410718aaaab948
.dll windows:4 windows x86 arch:x86

79e869484fd4a51e0658a98d6f44c9cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

StrStrIW

kernel32

GetCommandLineW
GetProcessHeap
SleepEx
CreateThread
CloseHandle
UnmapViewOfFile
VirtualAlloc
MapViewOfFile
GetProcAddress
GetModuleHandleA
ExitProcess
HeapAlloc

Exports

Exports

DLLGenHWID
GenHWID

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ