121ea1a099db4b5d6d47832a54f5b670 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

121ea1a099db4b5d6d47832a54f5b670
Size

28KB
MD5

121ea1a099db4b5d6d47832a54f5b670
SHA1

b5b10960b38369628a812e566fb56667253c33cb
SHA256

d96170302309b738964e5a058bea96c72cae7dd4d576cb09ae59708df02490bf
SHA512

c42d0b392b94d6ea7f60019738d51c881c59341e5ab6623ef046a79829f1379ad66652daef310437a0246b0c9e35b84459666a748e3c89bc059fb6fa1d9bed61
SSDEEP

768:ryqpWxhjyBx/4rVJG4Vd7KcNL9qiV/Ml4:OqExhGB54rV0QIiW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
121ea1a099db4b5d6d47832a54f5b670

Files

121ea1a099db4b5d6d47832a54f5b670
.dll windows:4 windows x86 arch:x86

604af5cd27fa86801742fdf7dd75fd6c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

NtClose

basesrv

BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization

Exports

Exports

BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization

Sections

.text
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE