6d0e41c2560e24f2146bf9ca65ff2404 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d0e41c2560e24f2146bf9ca65ff2404
Size

73KB
MD5

6d0e41c2560e24f2146bf9ca65ff2404
SHA1

2840bc60aaf3eca2e670c51d760e6d96ce956c3a
SHA256

091585d3f3a6bea6c0a48a6afe5a1f38fa65fd2fcf805568abedfb08904a636d
SHA512

b7c00edc9663735938260ceb2aa718f208d20651d8b982abf9e7fc9c02a8c49f488cecd49dd020ba3ffa3beb5dcf1f33d7c3770fbbd5a84f39ffeef2577afb92
SSDEEP

1536:Yxj61WBbh+kdnj4NPMCut9FFcxw/3OcGrp32hhOh1WiO59:YxSU+E1rt9jk1P15O59

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d0e41c2560e24f2146bf9ca65ff2404

Files

6d0e41c2560e24f2146bf9ca65ff2404
.dll windows:4 windows x86 arch:x86

caa0628703c61664d5b07637acabdee8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

MmLockPagableImageSection
IoSetThreadHardErrorMode
IoSynchronousPageWrite
ExInterlockedExchangeUlong
ExInterlockedPushEntrySList
NtQueryVolumeInformationFile
KeInitializeInterrupt

hal

WRITE_PORT_USHORT
HalSetRealTimeClock
IoAssignDriveLetters
KeRaiseIrqlToDpcLevel
KeRaiseIrql
IoMapTransfer

Sections

.data
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ