4c920c1fdea1235967d2af4b3222e567 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c920c1fdea1235967d2af4b3222e567
Size

4KB
MD5

4c920c1fdea1235967d2af4b3222e567
SHA1

699060e0cdc4b83bbaeb4d7702ef9d92c90cdfeb
SHA256

dcd5a343ea6bfb32ef253f6f0cba93e329d5c084efcc49d6a7cc7065ff49e2aa
SHA512

df5e4e2dd06b5dea160fba34e3debd1802eb44b1175f4b3bcdaac15739e97d24a93c10748651d8dda924ad0b3d560305c019605273aa6528e79710c7d109dd67
SSDEEP

48:qHxmRky7brF3xU54UA3ixtCEY7nwWKqs8F8yvk9AIKhgD/d:exmdDXizCEYrwYsA8/r/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c920c1fdea1235967d2af4b3222e567

Files

4c920c1fdea1235967d2af4b3222e567
.dll windows:4 windows x86 arch:x86

38d4582d45d1e8fe0e32f1aa078a273d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte

user32

CharLowerA

msvcrt

strrchr
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

hidedll

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ