1db198be24cf22cb302e56bd1fb7455c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1db198be24cf22cb302e56bd1fb7455c
Size

17KB
MD5

1db198be24cf22cb302e56bd1fb7455c
SHA1

597161525e8a088ef41efbd41998c24db9281162
SHA256

6ae0410065f9a86df22b27632c43bad90ecf6466471a27ca40d635912091db3e
SHA512

c194930682a23f6df755804b2dccb9b538c970895b912dafc0c4220334c36c1f85212c7c0b825b228d4c4546a17868f377508cb64666e0c2b3fd929f0a14f4af
SSDEEP

384:suYlCC7M5OWfC5LpqzRyYqWHOpdpkd888fM7:suYT70OHEdwW8i7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1db198be24cf22cb302e56bd1fb7455c

Files

1db198be24cf22cb302e56bd1fb7455c
.dll windows:4 windows x86 arch:x86

27f2c465370744a755117668f36fa90f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CreateThread
DisableThreadLibraryCalls
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
GetModuleHandleA
IsBadReadPtr
IsBadWritePtr
Sleep
VirtualProtect

msvcrt

__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memcpy
strstr
system

user32

GetAsyncKeyState
MessageBeep
MessageBoxA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ