4c61bbd88729bc7336740efbaa44e368 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c61bbd88729bc7336740efbaa44e368
Size

212KB
MD5

4c61bbd88729bc7336740efbaa44e368
SHA1

c50fc8576abaa5f2a530717de446406aadb63247
SHA256

df6cf1078fa2b030088bc1c3392ca8b32374976c051a796802bfd0905e9a35a8
SHA512

4cae2f3777b4e539dea74f728e4f1158b98d704dfa32aac7634b11eb19f5e758d9844f5de9545f2d8a065e3a322b16f79e4de15aee9abb768ed007c92aead465
SSDEEP

6144:OOwJbPqjPVhc2RWo/pgJDciF7kyly4PbsuTiyc:OJ52Ia6l0ib/TU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c61bbd88729bc7336740efbaa44e368

Files

4c61bbd88729bc7336740efbaa44e368
.dll windows:4 windows x86 arch:x86

545179dc0cedc718decd99ff2519f29c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

WSACleanup

ole32

CoTaskMemFree

wininet

InternetReadFile

urlmon

URLDownloadToFileA

user32

GetForegroundWindow

gdi32

CombineRgn

advapi32

RegQueryValueExA

shell32

SHGetFolderPathA

oleaut32

SysAllocString

Exports

Exports

Always
DownloadDLL
GetPlayerVersion
KingsStop
_JDIS_DISOSD_S
playAdk

Sections

.text
Size: 202KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE