05d8fe00f044745fb6dcc9b41b564c54 | Triage

Sharing

General

Target

05d8fe00f044745fb6dcc9b41b564c54
Size

20KB
MD5

05d8fe00f044745fb6dcc9b41b564c54
SHA1

06d1073927f242861c4a0f4b5eedb0c9e144bd43
SHA256

94a875d34ba59c0bba82eaf197644838453a141942ca2de3f65d913aafaae941
SHA512

129122c3284672137d156d8b68a310cbca7028eb05220f6cd459745732da90d7f70577510642edc4424d7640bb91fd3a469c1541a6c3448a0d72d9f35bfccb5b
SSDEEP

96:qNQWsy4ZlW8pvVTG2KD182BOZL0JJKwJfbWIt/6XidCT6:wQ3W87SR82tKaWItCSM6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05d8fe00f044745fb6dcc9b41b564c54

Files

05d8fe00f044745fb6dcc9b41b564c54
.dll windows:4 windows x86 arch:x86

533b327ddf5687a9f12b042a250aab26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
_adjust_fdiv
_initterm
free
strstr
sprintf
wcscpy
wcslen
_strlwr

kernel32

CreateEventA
SetFilePointer
VirtualFree
IsBadReadPtr
CreateFileA
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
Sleep
DeleteFileW
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetLastError
GetCurrentProcessId

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 723B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ