05a0a5b099d928be89cd0e0ef4971f5a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05a0a5b099d928be89cd0e0ef4971f5a
Size

19KB
MD5

05a0a5b099d928be89cd0e0ef4971f5a
SHA1

2f8fa98efab00bb926dfd146abd06b8d0af31457
SHA256

76abeaddc223d62886d77b80d2f6fef1423ca380dfc7f307e7126495cf647237
SHA512

772a98ffe8544d20168d18f4dbcc854e07e287f930869a5cd399ed2647f700213891370ebb23eff62e2441a337e8b5413ec1fa4247a9df4496a688c4d14e84d4
SSDEEP

384:8j44qkDQnwskPZEIlqZaM2JFiLea4Z8aRNsMWVkv:8j44q6skPZEIEUMyiLf4eaXWC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05a0a5b099d928be89cd0e0ef4971f5a

Files

05a0a5b099d928be89cd0e0ef4971f5a
.dll windows:4 windows x86 arch:x86

c1f8dce0359a302284d52a7ed373d7ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

_stricmp

Exports

Exports

input

Sections

.text
Size: 14KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE