063c854b1bac2341db0d9656b04e0886 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

063c854b1bac2341db0d9656b04e0886
Size

20KB
MD5

063c854b1bac2341db0d9656b04e0886
SHA1

07027b324ed3c15efcd1b35a95cd9a6e48c654e1
SHA256

6535c6b2d2641ab614e3ca301ac811ac0ba66641e90c7b3d2d739c8b1f94bfb1
SHA512

d887ac0f980e540831de4f38a4268c89502dcf95defc4dff5da6c5a4d224f9d99d3ec59151f4a5161fa052f3fceadf5a451f0a8c92ae93cf8b7f731bb9db04fe
SSDEEP

96:qNQWsy4ZlW8pvVTG2KD182BOZL0JJKwJfbWIt/6XidCT6:wQ3W87SR82tKaWItCSM6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
063c854b1bac2341db0d9656b04e0886

Files

063c854b1bac2341db0d9656b04e0886
.dll windows:4 windows x86 arch:x86

533b327ddf5687a9f12b042a250aab26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
_adjust_fdiv
_initterm
free
strstr
sprintf
wcscpy
wcslen
_strlwr

kernel32

CreateEventA
SetFilePointer
VirtualFree
IsBadReadPtr
CreateFileA
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
Sleep
DeleteFileW
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetLastError
GetCurrentProcessId

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 723B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ