118383e0c5f7fcbf15b84c5038d2ba45 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

118383e0c5f7fcbf15b84c5038d2ba45
Size

15KB
MD5

118383e0c5f7fcbf15b84c5038d2ba45
SHA1

27f0a28ee48cad35e33602d0e42295e9a711f802
SHA256

bb30cac70943939673afb8fd4eca9e64fdeebb1ad46ca5c56537e46a546e69be
SHA512

e1a45ba74f1fb9ab69fcb3734557b425cc0ba78e58ef7b0c2c63f05a91ee049ed229cef5ff037b7ada8756485cb6e39dc9bfe5d00ee6b2744d4152e6d8360914
SSDEEP

384:OJ+HSLlQdZWuHd0KULbCIlbszAPXDRYgoX:OJhCdZWVKUfCwIzQO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
118383e0c5f7fcbf15b84c5038d2ba45

Files

118383e0c5f7fcbf15b84c5038d2ba45
.dll windows:4 windows x86 arch:x86

a664d5e299a9c59bd03c947b280ffe95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

RtlCreateRegistryKey

Sections

.text
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ