72a756504c37a22b7470c8378e458875 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72a756504c37a22b7470c8378e458875
Size

42KB
MD5

72a756504c37a22b7470c8378e458875
SHA1

a5c8394a9110617843b3eb0f5fe77f1f79205f53
SHA256

b4f2adfe62345c8b3b239db7ff6c68d2e9627c0624a4f7ce0694d90de0c1c99a
SHA512

bd01b7cfce94b14702d09ef64cbea2fd0caad28b1e18b5e502bd65422da1d51c0e1d0f444f70bedbe061e2f4d091b361a21c18fc1ad108dc005721e245f01435
SSDEEP

768:VpOeOrpJxIddQ3f7pVFPo5e7rb5PyBL1o9gAia:Vpk3xL3TgSrbgboeAi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72a756504c37a22b7470c8378e458875

Files

72a756504c37a22b7470c8378e458875
.dll windows:4 windows x86 arch:x86

de91df502054d2e0812d8bd5f4505923

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
CloseHandle
GetTickCount
GetStdHandle
QueryPerformanceCounter
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ