0d0011572a474171f59a4a9fede3b368 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d0011572a474171f59a4a9fede3b368
Size

20KB
MD5

0d0011572a474171f59a4a9fede3b368
SHA1

c54596bb180070b6be9bed630a838b88d993bba6
SHA256

58d206fe0ec9788d28561aa9b69c9040d6ec39b54dc344d8286b404848bf3243
SHA512

e8b0e4475ec317f827f4ff46e09194ca48420a709ad48577cd0e03073c61a90ea79c329a2400277505660f2dcfd8e1e20f5c1b90bfd4305e0716c7c49849ccca
SSDEEP

384:1b5nO2TvW8soUXI+syVj1YJBY30VWNF3d7Y0otU5:1b5nJvW8soUXIugY30yM0E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d0011572a474171f59a4a9fede3b368

Files

0d0011572a474171f59a4a9fede3b368
.dll windows:4 windows x86 arch:x86

65918adfeca1f4be37549c8c8b3a4524

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
LoadLibraryA
Sleep
lstrcatA

oleaut32

SysAllocStringByteLen
VariantInit

Exports

Exports

DllMain
cbgjju
lsfpdfb
mrtkrmo
xaems

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 712B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ