00652c2ab0547378188fbf666866b9ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00652c2ab0547378188fbf666866b9ca
Size

272KB
MD5

00652c2ab0547378188fbf666866b9ca
SHA1

ad56dcf90d371befaeb5cfff7da183066b61d97d
SHA256

c6086954de119655ebb52ed05af84438dc646d455ba114e41ca8b0ae0919e0b3
SHA512

c2cbf41ba53781236ce6382241898b533303170ef12e4c5dcdf650acd73814acec87eb83dd484cfe1ef8a4789b94d3f8ca77fd91e37a0f6f050bf831654d8589
SSDEEP

6144:2+82iA1+W5Z74YFersRu9EaVz26BXoAhWHd30N3y2k:BBHJVF7i+/mdy3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00652c2ab0547378188fbf666866b9ca

Files

00652c2ab0547378188fbf666866b9ca
.dll windows:4 windows x86 arch:x86

3a8dcdb94d79375255d5ed2c9bcc7577

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
GetFileSize
TlsAlloc
lstrcmpA
lstrlenA
ExitProcess

Sections

.text
Size: 24KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 243KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ