1b537f8fb616dac3ab2f59ad4b5770bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b537f8fb616dac3ab2f59ad4b5770bf
Size

374KB
MD5

1b537f8fb616dac3ab2f59ad4b5770bf
SHA1

33c3539816b4fdd644687a301768080f976b3e1b
SHA256

4467d43a3899c2e338095244cf30d17ed44a36b0dd9e27430fd98b25a0a0424a
SHA512

bce04accc7cdb28a8bdd8b5871d630020c33c9cbbcf290e676ead2509795a5506606ea1e33aa83aee15dccabe2f41c78a59f4398b27b879d73f08915d992d34c
SSDEEP

6144:aMG/j9I6s+3NrdBWR4qZEl7lpxPLq35bJg3UiJpWN+khDjllOlZQK/ZYAc2s5As5:EL9J7QzZIhX47WTkbhDjLOk8Z7c2fNU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b537f8fb616dac3ab2f59ad4b5770bf

Files

1b537f8fb616dac3ab2f59ad4b5770bf
.dll windows:5 windows x86 arch:x86

75fe88ff0fdbf46d39c99b72c07f234f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

wsprintfW

advapi32

CheckTokenMembership

ole32

CoTaskMemFree

shlwapi

PathFileExistsW

psapi

GetMappedFileNameW

version

GetFileVersionInfoSizeW

wininet

InternetReadFileExW

dnsapi

DnsFree

ws2_32

inet_addr

iphlpapi

GetAdaptersInfo

rpcrt4

UuidCreateSequential

Exports

Exports

CB_Init
DllEntry
DllProc
WT_Init

Sections

.text
Size: 367KB - Virtual size: 688KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE