165aecbb7348f177ce1f07f4bb22c855 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

165aecbb7348f177ce1f07f4bb22c855
Size

132KB
MD5

165aecbb7348f177ce1f07f4bb22c855
SHA1

c09548033b3ac0fa0b0ea7f8a817a1152fa69fa4
SHA256

de6f21b624cbc2667c8bc7c9c9159a9f1588493efa5a73d580b0d00b1bb0e6eb
SHA512

7725be10c9469a963943d61d615482dbdfa27dfc358e7249a9b519b789fb6d4c1816c688a2429c0be55e07dc5f6836ecb511efbc027f4f1704cae01f4184b805
SSDEEP

3072:cCvcxSckSuPHr3cnPJgk2gDR3p6puY4vGdJ1c+4G:GxScQD34Rb+dPc+L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
165aecbb7348f177ce1f07f4bb22c855

Files

165aecbb7348f177ce1f07f4bb22c855
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ