02eff338f4f15cf2c19293d7d7bacf50 | Triage

Sharing

General

Target

02eff338f4f15cf2c19293d7d7bacf50
Size

30KB
MD5

02eff338f4f15cf2c19293d7d7bacf50
SHA1

168974155e5b4d0eb7f3cd2af0d41e6569a49b1f
SHA256

01deffdf3364f8554ab9a92d156283409dd723c28eca301f7a2696b94f71258b
SHA512

543dc1f6075764749a52aadee9011e0b90208db9a4e82d867540ef0d8786e7a0760748198ed01a77254e145f18a4c00103ca94ecd2baf9d84a2a0f482c6a5d16
SSDEEP

768:5jGV+9PD2HqWOlcXnG2wWh3Ls7OBHOows:4UzcXnGU3MOBuoz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02eff338f4f15cf2c19293d7d7bacf50

Files

02eff338f4f15cf2c19293d7d7bacf50
.dll windows:6 windows x64 arch:x64

7270ed4d4596f259a5d379cb63bdb8f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
VirtualProtect
VirtualQuery
lstrlenA
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
GetProcAddress
LoadLibraryA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ