6101f3b66dc1b58f8f18faedca0a1117 | Triage

Sharing

General

Target

6101f3b66dc1b58f8f18faedca0a1117
Size

69KB
MD5

6101f3b66dc1b58f8f18faedca0a1117
SHA1

f64f7c19031dbd6f04c6fb9f7a0fd41f2d8a560d
SHA256

7282511813c4f941717ac9f7e22dea59354d7a5659721664623bbfa9407bb549
SHA512

aee18fd4c9cf11518d77a37126859c92cb280f15f58700ac27e712bccaddbc925203b3f667b09eb7aad187137610df0c426430a119cf6f6017b71d83ad2df305
SSDEEP

1536:KKm1vNA98nvjYRCKJF+JaXPpNqWh2T1aIZpMTnAAzqRbitDllHwztuQ:KKAxnFK6wXxNqWUT1HMTnSQtRlHwz7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6101f3b66dc1b58f8f18faedca0a1117

Files

6101f3b66dc1b58f8f18faedca0a1117
.dll windows:4 windows x86 arch:x86

6f069b236a222984adcfa511bd42a5dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
EnumResourceLanguagesA
ExitProcess
ExitThread
GetStartupInfoA
GetTimeFormatA
LoadResource
MapViewOfFile
TlsGetValue
VirtualAlloc
lstrcmpA

msvcrt

wcscpy

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 926B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ