865e495c0c6ffaa7785722715499d9282c8583d52a9cffdd668d8108db9e45e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

865e495c0c6ffaa7785722715499d9282c8583d52a9cffdd668d8108db9e45e1
Size

1010KB
MD5

0460ba252cd69e22dea33301cdb361e2
SHA1

d541a5c6be50371086ddf48037275062be59119d
SHA256

865e495c0c6ffaa7785722715499d9282c8583d52a9cffdd668d8108db9e45e1
SHA512

5d023d0315ee702ceb82a19007922a58c0d0906ddff4646686b94e0473f699e196e387c0cd2a58036ac2dc9fe1f8d3b581df8aedb928b7b8c9250c6834d9ef8f
SSDEEP

24576:7DfZF+vO4ZDLxwhh1pfA5CVaf7fVp9e/FgTf6a/ls:8O4lLxM3pdZNC6a2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
865e495c0c6ffaa7785722715499d9282c8583d52a9cffdd668d8108db9e45e1

Files

865e495c0c6ffaa7785722715499d9282c8583d52a9cffdd668d8108db9e45e1
.dll windows:5 windows x64 arch:x64

eb43d321b3ebbbc51dc2f532b47d0ed8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
ReadFile
SetCurrentDirectoryA
VirtualAlloc
GetModuleFileNameA
CloseHandle

user32

wsprintfA

Exports

Exports

OnSessionChange
Refresh
StartComponent
StopComponent
libvlc_new
libvlc_release

Sections

.text
Size: 1024B - Virtual size: 666B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text0
Size: 1006KB - Virtual size: 1006KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ