0e7c5af0dfbc1382e2f607ab4f69b314 | Triage

Sharing

General

Target

0e7c5af0dfbc1382e2f607ab4f69b314
Size

80KB
MD5

0e7c5af0dfbc1382e2f607ab4f69b314
SHA1

a004812e914cd16d24d296dfac77bcf35727cd99
SHA256

49b34eec9d886c2c06aa0d35344e8f19b09431bae5b5630d493eae4e8ae530f8
SHA512

fe33e01b316af3d44a200b3617be21a20a71004a1dcf1beca43d15b87080ab29ddd4ac239b7b7a0a5ad2a37d6f20602b2f2bcebc533ba5b03ade26d3b113e252
SSDEEP

768:S9tepzcpol806v0dWPvE/896NVUvUnLBpT01fV9RIJP1FBELliGgPpMumGAPCm:MtTp6N6va6vEE64UnLBpT0mBLgPCm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e7c5af0dfbc1382e2f607ab4f69b314

Files

0e7c5af0dfbc1382e2f607ab4f69b314
.dll windows:4 windows x86 arch:x86

ac35b4361ec9d8e31c5cb27d3c3685b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
Beep
HeapAlloc
GetProcessHeap
HeapFree
EnumCalendarInfoExA
CreateTapePartition
WriteFileEx
ReadFileEx
CreateFileA

Exports

Exports

trjsxq

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 698B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ