2dd69775366b0fe1ce177aeb2b42867b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dd69775366b0fe1ce177aeb2b42867b
Size

12KB
MD5

2dd69775366b0fe1ce177aeb2b42867b
SHA1

110f15aaafe20ef54342b2315cd2e5cf360dacf2
SHA256

40db8a73dda1436d7d4ee1120e6fb1d602fa713cab1d2e3689b4cc06cdb879dd
SHA512

366b2750ff5c38ed99b4639cc67f647d4b20c01136b8e045bb93010d1cadb65273c237ceab770b41f28c7202b7d57fb0a7879c69551155e9ecbae8ab4edd8fd1
SSDEEP

192:pM/y9ngyLHOVRxoJhQLXrHbTu+34chzjRH:uI9LOVR6fQLrXnzF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dd69775366b0fe1ce177aeb2b42867b

Files

2dd69775366b0fe1ce177aeb2b42867b
.dll windows:5 windows x86 arch:x86

99ce7d90aec1046b58b66962fb6f2ec0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
GetProcAddress
CloseHandle
lstrcmpA
FreeLibrary
OpenProcess
GetSystemDirectoryA
VirtualAllocEx
GetTempFileNameA
LoadLibraryA
Process32Next
GetModuleHandleA
CreateToolhelp32Snapshot
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent

user32

FindWindowA
LoadCursorA
GetWindowThreadProcessId
CopyIcon

Exports

Exports

Exbcute

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 985B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ