054ae757cfff23d2351dba55dea6fbf4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

054ae757cfff23d2351dba55dea6fbf4
Size

370KB
MD5

054ae757cfff23d2351dba55dea6fbf4
SHA1

3a4b93df3992f6d25e81e895376bca62e6fb72f6
SHA256

dd6f5b795277893171fa075905ef35da71e4f9440f4f72bc7bca429d346a42db
SHA512

f2c0c9b2c3a166a9e7253107504964e63b7bd407adcf86f78f5b280f66068838f003be724a29106a2b1b549f43ab5c872f657076d6afe14c675fe7798d5a26a4
SSDEEP

6144:4hLoUTRs7mnnYG/iiEsNY9hqzS0ahQI8mA4QkUlKqk:4h0ysKnnYGgsGwzS0C18mA5dlz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
054ae757cfff23d2351dba55dea6fbf4

Files

054ae757cfff23d2351dba55dea6fbf4
.dll windows:4 windows x86 arch:x86

4ae8cce1cdb668a8fad907517a62efc7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
ReplaceFileA
Beep

Exports

Exports

dqfbuad

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 529B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 308KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ