5d1666b9c18b5d3164d0b16bbacbfa7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d1666b9c18b5d3164d0b16bbacbfa7c
Size

17KB
MD5

5d1666b9c18b5d3164d0b16bbacbfa7c
SHA1

c7535ff37c01aa37e58c9e3866213a6055bb8daa
SHA256

f0226f6829335be383487cdc2d16dfa93ba979930a0e30a2c2c322fcdb12f031
SHA512

12cc071367f370ac54b218def0b3cc29d7873e82ab9e601c704bc4634e2bf26a0b04ed42d84db3699e5af346d976647c35ea7b89f52df439867c38e85e86fede
SSDEEP

384:V6Y4TjG1AiGrxXuYjuwuDlSRUvitbpsroW33tW3pOGHgoy5T:Vx4u1ATrxX5PGN6U1dBl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d1666b9c18b5d3164d0b16bbacbfa7c

Files

5d1666b9c18b5d3164d0b16bbacbfa7c
.dll windows:4 windows x86 arch:x86

0616061f8da8ee8efd77c3b21c9e667b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

_vsnprintf

gdi32

CreateCompatibleBitmap

user32

wsprintfA

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 12KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE