2e42134c6fd86834eb2a5b62b3fe58e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e42134c6fd86834eb2a5b62b3fe58e0
Size

20KB
MD5

2e42134c6fd86834eb2a5b62b3fe58e0
SHA1

7043040572b99347516f54bb3994d86629f38437
SHA256

5de5172ad8442f4c20bfd41d51fc6135e4f291cc40cf9efc65d1ef28a225b5ca
SHA512

24886feac0a7f1d74c93115f0a297755f51892bea3fdf90f66655d12c17df32cf201479d617a90150e77bd4bd1bd2d334fe3623817e3b3d0de241a59aba38718
SSDEEP

96:qNQWsy4ZlW8pvVTG2KD182BOZL0JJKwJfbWIt/6XidCT6:wQ3W87SR82tKaWItCSM6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e42134c6fd86834eb2a5b62b3fe58e0

Files

2e42134c6fd86834eb2a5b62b3fe58e0
.dll windows:4 windows x86 arch:x86

533b327ddf5687a9f12b042a250aab26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
_adjust_fdiv
_initterm
free
strstr
sprintf
wcscpy
wcslen
_strlwr

kernel32

CreateEventA
SetFilePointer
VirtualFree
IsBadReadPtr
CreateFileA
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
Sleep
DeleteFileW
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetLastError
GetCurrentProcessId

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 723B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ