118a86b6a684ea977ae6c44028f0535b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

118a86b6a684ea977ae6c44028f0535b
Size

48KB
MD5

118a86b6a684ea977ae6c44028f0535b
SHA1

545f72eaf9d428550946d42bcc60f9f1f28513e1
SHA256

93c53af1c060bac6f887da9af01ad3009373276959cf0658b3f656d1f66390b2
SHA512

76ce2384bf9139921a4a1d75217496f2f220099f8d8f52d16c65dd5ad573f2017497bff7a9f4780671516ea8948adcd8b62c87f42ac362bfca5d5c274a61ea4c
SSDEEP

768:IzGjKFDjwAyQiz6EhZZoRwPcVyZ0N3te9AiMbcAGHQBw3Cf:IF563UEaN9MAiLALw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
118a86b6a684ea977ae6c44028f0535b

Files

118a86b6a684ea977ae6c44028f0535b
.dll windows:4 windows x86 arch:x86

4ed972528e5dc392982618c2cb4ec4bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

strcpy
_wcsnicmp
strcmp
RtlImageDirectoryEntryToData
RtlImageNtHeader
_strlwr
memcpy
strstr
sprintf
strncpy
memset
strcat
strlen
_strnicmp
wcsstr
_wcslwr
_chkstk

kernel32

VirtualProtect
LoadLibraryA
OutputDebugStringA
HeapFree
HeapReAlloc
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter
ExitThread
GetCommandLineA
GetTempFileNameA
MoveFileExA
DeleteFileA
CloseHandle
GetModuleHandleA
GetVersionExA

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ