57cb25fc053bf21a526adba9f3ef6cf4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57cb25fc053bf21a526adba9f3ef6cf4
Size

88KB
MD5

57cb25fc053bf21a526adba9f3ef6cf4
SHA1

0a1cea5ad7a56c47b7c7e307606486af50d574ff
SHA256

e4dcab3a843a516f7170bd4b03b4ccf3d82333b2f18231953fc22a241f5941ed
SHA512

dea0c627da0e89eb7601427e3fb26e357ca895aef82d9589e11a9a9c961b7677c0ec0cc1bc0c8a5af76b366c50b68bdbe7e75412cfa2a10cb747ccc357c74588
SSDEEP

1536:P992I1eLkjRz2JeobcuYzlWnX2GZgQKFiVz3tvg6HWNHIXKxPdqaVgq+:rkkd6h6U2UZgoXwl+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57cb25fc053bf21a526adba9f3ef6cf4

Files

57cb25fc053bf21a526adba9f3ef6cf4
.dll windows:4 windows x86 arch:x86

6cb0f215e0d9138ff15ee7dd8717cb3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
DeleteFileW
DeviceIoControl
ExitProcess
FindFirstVolumeMountPointW
GetACP
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapAlloc
HeapCreate
IsDebuggerPresent
LoadModule
SetComputerNameExW
SetDefaultCommConfigA
SetLocalTime
SetTapeParameters
lstrlenA

user32

LoadMenuA
EndDeferWindowPos

comctl32

ImageList_DragEnter
DrawStatusTextA

ole32

CoCreateInstance
CreateAntiMoniker

dbghelp

SymLoadModule64
SymSetContext
FindDebugInfoFile
SymEnumerateSymbolsW

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ