5c26f40349a99234019b2d4b6d12af8d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c26f40349a99234019b2d4b6d12af8d
Size

47KB
MD5

5c26f40349a99234019b2d4b6d12af8d
SHA1

8791d39d6a26750c804c209c0a71efb424a92835
SHA256

e685d6b99af020b105c22f93e8a8e052920e5d11cd33283fb3362978981a6a8b
SHA512

c1a6921100123b1c31dd83dbdcf48c51014cd78f252c12346400ae62dfbd3db10562aac949b7e502e1f07c7c64aed47b9aac8807e45270500ee872ce0ae3d41b
SSDEEP

768:WlgEPKzyKH9fUQTdCmMZO8Tz17U82aanR92Zjk8ub9lNQI1y7cKxGXsxU1fTfHBa:Ig8IydQTdCmMnTx5do4jk809lWQKQcQM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c26f40349a99234019b2d4b6d12af8d

Files

5c26f40349a99234019b2d4b6d12af8d
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

SFNTsntlActivateLicense
SFNTsntlCleanup
SFNTsntlDecrementCounter
SFNTsntlGetContactServer
SFNTsntlGetFullStatus
SFNTsntlGetHardLimit
SFNTsntlGetKeyType
SFNTsntlGetLicense
SFNTsntlGetVersion
SFNTsntlInitialize
SFNTsntlLockData
SFNTsntlQueryLicense
SFNTsntlQueryLicenseDecrement
SFNTsntlQueryLicenseLease
SFNTsntlQueryLicenseSimple
SFNTsntlReadLease
SFNTsntlReadString
SFNTsntlReadValue
SFNTsntlReleaseLicense
SFNTsntlSetContactServer
SFNTsntlSetHeartBeat
SFNTsntlSetProtocol
SFNTsntlSetSharedLicense
SFNTsntlUnlockData
SFNTsntlWriteString
SFNTsntlWriteValue

Sections

mian0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mian1
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mian2
Size: 47B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE