125c8104e4b689ba58ed9d26811b9a24 | Triage

Sharing

General

Target

125c8104e4b689ba58ed9d26811b9a24
Size

106KB
MD5

125c8104e4b689ba58ed9d26811b9a24
SHA1

a8fe8d1d6b2149ce55228a8b167ffb6693f7cb59
SHA256

bdd3eceeeffa151fe5f224b446a56780fec4d15204611a30a46a418bdeaa9139
SHA512

f7ec5a2d4962dc2a643bc04cb814ab616c61e6dd07167ca8a3388ca58751855fa6c96c46cd158ea0bbe0bcdcfb7ad4be219e9aacffe04d8c81fa261538254129
SSDEEP

1536:ozsOEjp/5jwrFpA40V+9e0QTunk97+SfYcLy0GFONKrXk3YHKIHXYzhIqodHQzyd:ozb+/1w5oke5Tf78cu0GsLeNHIGdwzjg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
125c8104e4b689ba58ed9d26811b9a24

Files

125c8104e4b689ba58ed9d26811b9a24
.dll windows:4 windows x86 arch:x86

92914fded8a4ba0e7ee6cd99bd64e624

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
ExitThread
FlushFileBuffers
GetSystemTimeAsFileTime
GetVersion
OpenFileMappingA
RaiseException
ReadFile
SetEndOfFile
TlsSetValue
lstrcatA

msvcrt

wcslen
wcscpy

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ