539d170e5c76868e49a1534e2b294e96 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

539d170e5c76868e49a1534e2b294e96
Size

4KB
MD5

539d170e5c76868e49a1534e2b294e96
SHA1

005ad2145436add545368190072e812b2cb24ea5
SHA256

75f197e91c4f312adaf85864d984ba31810be3cf699e0d7bfeaac1ac6081bf7c
SHA512

db39e16a968315d582d8db4da3ac059d729c15467fb3588f67f83adfb65696a6dc074ab1aa16e89d712261089c1885159695586be07f99d0c3e12bb2effb3f87
SSDEEP

48:iJmz2P7dQf0XHnuE8jWsyO+G4rcKJ7WSHU23hfZtokc0XyKA+veM/gDhAy:EzugHno7yO+9Y602SuhJmMoVAy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
539d170e5c76868e49a1534e2b294e96

Files

539d170e5c76868e49a1534e2b294e96
.dll windows:4 windows x86 arch:x86

325138a7a6afaa775322d76029e01058

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
HeapFree
HeapAlloc
CloseHandle
WriteFile
CreateFileA
FindClose
FindNextFileA
FindFirstFileA
lstrcatA
GetVersion
lstrlenA
lstrcpyA
GetWindowsDirectoryA
WinExec
ReadFile
SetFilePointer
GetModuleFileNameA
CreateThread
GetProcessHeap

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

Exports

Exports

_f@8

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ