2dd6a1853de9941437df8731f30c569f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dd6a1853de9941437df8731f30c569f
Size

20KB
MD5

2dd6a1853de9941437df8731f30c569f
SHA1

fedb5c16006c0b47ffbe3b76b63579ea480807dd
SHA256

c186db1ee142bd22d3533f556e219b362d5cede94238d4907ec6e9da421d49a6
SHA512

a3aba0f097af6d5fddab12feab3dd675b41320b2afd051e558d93847a1ea5f0e0c125daebd8b50d2d04a6e503c95de2ae73d427da45191c286499974bda48a8b
SSDEEP

384:SVFc201lDhcgGnujNR58tXf4G2o7IeAjN5Poh2lo:WK201lxGuD58xqnoZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dd6a1853de9941437df8731f30c569f

Files

2dd6a1853de9941437df8731f30c569f
.dll windows:4 windows x86 arch:x86

e017715095f11ddf1455a1c50b7f655a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

shlwapi

SHDeleteKeyA

rasapi32

RasEnumDevicesA

iphlpapi

GetAdaptersInfo

user32

GetThreadDesktop

advapi32

CreateProcessAsUserA

ole32

CoInitialize

Exports

Exports

EvtShutdown
EvtStartup
inst
run
tes

Sections

.text
Size: 10KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE