0d4d79cd43ea8aa3446c31145391e210 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d4d79cd43ea8aa3446c31145391e210
Size

44KB
MD5

0d4d79cd43ea8aa3446c31145391e210
SHA1

7cdfebf7cce7375b872b3facc24a8ffb8378a58d
SHA256

cd5d40c5aba67d6e3326efe4a96d03d1d32097b516db1cfeadabed1fcbfe5006
SHA512

32328a89e9b37b6153a68006e2d6573a1d4d48d5c055d0f1a8f9547208ea42b74a33b1ebc792ac17d99a88f5fe57988e1b93176d1721f708f4ab44f39b32c95d
SSDEEP

768:elkEuBRrNTCauwutUxsU+GkK969uLvzg+NDQmKKX1ne/AjV4TqpS9Cb9cpJrk:nEYrNPuwuixD+Gr9guLvzg+NXRjV/lbB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d4d79cd43ea8aa3446c31145391e210

Files

0d4d79cd43ea8aa3446c31145391e210
.dll windows:4 windows x86 arch:x86

5544a558178895c012502baa823128b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

connect

advapi32

SetSecurityDescriptorDacl

Exports

Exports

start

Sections

.text
Size: 39KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE