0d4ba843838fb545da40811562e889de | Triage

Sharing

General

Target

0d4ba843838fb545da40811562e889de
Size

28KB
MD5

0d4ba843838fb545da40811562e889de
SHA1

229891842a24e0bc3c17da2c2ba78ce3c2e42229
SHA256

fa3140d0386958f14d4b8f68e11495c741484be8290ebe6dda2ad0c29aa7ca63
SHA512

6cc24800f8620b504334e0b2099ab8450f3918f6756ca1afc1b519fe32c6102acb00a52ba76907bb5cee9165630d503a98cabfd2d107e2e3888a0752a0053e26
SSDEEP

384:PPnULntHPiXmhEORwSLsAMZBMpHbu230dWiWk53kzBW13mwpX7hrM1WhW7:0LnRKXmi6w+imQdp5003mwpLhrM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d4ba843838fb545da40811562e889de

Files

0d4ba843838fb545da40811562e889de
.dll windows:4 windows x86 arch:x86

6b46c0e401496d0d31e20b45231b9383

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCommConfig
WaitForSingleObjectEx
MapViewOfFileEx
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE