0141564a0eaf1808df4863a19d044b00 | Triage

Sharing

General

Target

0141564a0eaf1808df4863a19d044b00
Size

84KB
MD5

0141564a0eaf1808df4863a19d044b00
SHA1

01abb91c608a2fdaf855cb28fe364bdba760b6d0
SHA256

36c020355b064ab986969bf29bb4566a41f7ba23833be5d1143ec46c99fd8bc1
SHA512

8f621321ae88762e08ca77c2f1f555d0d9090965bea663bc279d84c490f3c024678dcb66284c9797cbf3f84ff723e765e75d0a3e93e868b92362f4fab622b557
SSDEEP

1536:hJkTwtHgjP/R/t1x5Pvwh/e8SwtslhOXyBHV7C6icywg9TGZLCHaC:hswVgjP/R/t1x5PYo0tssyB17Ckf0GRK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0141564a0eaf1808df4863a19d044b00

Files

0141564a0eaf1808df4863a19d044b00
.dll windows:5 windows x86 arch:x86

487596c063ff1018782578b3e2fe2a63

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
GetProcAddress
GetModuleHandleW
CreateEventA
lstrlenA
VirtualProtect
ExitProcess

Exports

Exports

SpaceRelationship
StemsDull

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 294B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ