3cfd95fd8df44b555d02b62e94515997 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cfd95fd8df44b555d02b62e94515997
Size

5KB
MD5

3cfd95fd8df44b555d02b62e94515997
SHA1

25a819a62a277a2e14e7639e2f71a9e9cb8aec38
SHA256

3bbacf15d7f1ca5fa7da9a448bbf62300cdaaf64b23dc395f1cab3e9157a6f36
SHA512

e5a51b744e07bf27a0d80aae862ac00a0c8263d0ba3a9b8c1215bbf1ec46b7e845bca1ec6e31671813568a5ea1552344c192c286af8d668aaadaf4e3e10f70f9
SSDEEP

96:RjDi6iiGIaXowjJj8KE7milmQ1k6GsvvV0DB5UVMecBT5iXa/dSFxBH:Rj+a1eSK+VSDcmFTgl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cfd95fd8df44b555d02b62e94515997

Files

3cfd95fd8df44b555d02b62e94515997
.dll windows:5 windows x86 arch:x86

e1e1d0a5df64560bc70977dd16416473

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

RtlInitUnicodeString
RtlRandom
RtlCopyUnicodeString
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
MmGetSystemRoutineAddress

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 128B - Virtual size: 50B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 256B - Virtual size: 232B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ