112ce997d46edb33d4f355134280a864 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

112ce997d46edb33d4f355134280a864
Size

91KB
MD5

112ce997d46edb33d4f355134280a864
SHA1

b61a72b3aaa3002b236578a44ada88ad6400320a
SHA256

c8fab2e5ad662aa148fb3b7edb19f80467515c144f6babfc0369e8b6476fe00b
SHA512

12e07585ed65bb934e4e94ea6b449ea617b5854f60c16dabed3a05c59b61ab1bf1cadb2370df6d87b2c091ed1dc3698e8983fb6d5909e57f5081f6174013bced
SSDEEP

1536:0dy7w3zRxHsFurNvYyiu4E+Db01FP2+jp5JRMqdn2FrziLRPfyO0pMyOv7t2Ybec:0MeDM4rNNihE+01s+jv3ErzWtT0+yOvt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
112ce997d46edb33d4f355134280a864

Files

112ce997d46edb33d4f355134280a864
.dll windows:4 windows x86 arch:x86

144f96ea5e6200b837c26c07319b7da9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetCommandLineA
GetLocalTime
GetTimeFormatA
LoadLibraryA
SetEndOfFile
SetLastError
lstrcatA
lstrcmpiA

Sections

.sforce3
Size: 24KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 61KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ