5dd5543a9ec16b3959e5a21bd85b6823 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5dd5543a9ec16b3959e5a21bd85b6823
Size

175KB
MD5

5dd5543a9ec16b3959e5a21bd85b6823
SHA1

40fec7d5e5fe9026dc207330625951001afa2900
SHA256

b2bcb01b2c4755ae460bcd5d2b80bac2b487c6496f9d2db34a0f84a3ffe6084e
SHA512

25e7d867ab4ad3abad2b3ef57529b6cd1953966415533b2b85f25c07c571339b99b927c50b425abb739ac23bcbd3c1d13492f4fc6fb7e86067b0532d1372a6ad
SSDEEP

3072:dtY5bY8XE+kkqh84cKcv4FinaLzL2rVQLOmpvNbTAvdstOr18T:rRAkkk84e4wne2nmhFAvd4O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dd5543a9ec16b3959e5a21bd85b6823

Files

5dd5543a9ec16b3959e5a21bd85b6823
.dll windows:5 windows x86 arch:x86

038ee71bd4ea63acaf586d3475ef17a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memset

advapi32

RegOverridePredefKey

user32

TranslateMessage

kernel32

OutputDebugStringA
GetModuleFileNameA
CloseHandle

oleaut32

VarI2FromCy

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ