162f8d0ed3df868b8a96dc234e3407f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

162f8d0ed3df868b8a96dc234e3407f0
Size

14KB
MD5

162f8d0ed3df868b8a96dc234e3407f0
SHA1

9010ddd4faf75a4edc88f4ec25959a9299893e81
SHA256

738b4afa2c9c73318160b6dec445dd3304888a39fb4c76c966faa506da0e63b4
SHA512

c6169d21ca242d771af9f32fd655d3193e967839d98cfc1ba29986f4da23c8fc38e5173e7ba920f30c87416f4e41fa286b46ebcdb069a81362fefec6fbbace4e
SSDEEP

384:6xFHlSbCAE8DkeeF6ivRlkSBqUws4GDkuUlX:cFHlSbtTs5tMskzX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
162f8d0ed3df868b8a96dc234e3407f0

Files

162f8d0ed3df868b8a96dc234e3407f0
.dll windows:4 windows x86 arch:x86

87b45c188cc2f4b58d558fdcfaf93980

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEnvironmentVariableW
FreeResource
lstrcmpiA
HeapFree
lstrcpy
lstrcmp
SetLastError
CreateEventW
WaitForMultipleObjects
CreateWaitableTimerA
lstrcpyW
GetEnvironmentVariableW
LocalHandle
GlobalHandle
lstrcmpiW
lstrcmpiA
SetUnhandledExceptionFilter
CloseHandle
CompareStringA
VirtualFree
CompareStringW
lstrcpyA
GlobalAlloc
CreateSemaphoreA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ