2181fb1a825ab0c4095efb777a4a04bd | Triage

Sharing

General

Target

2181fb1a825ab0c4095efb777a4a04bd
Size

13KB
MD5

2181fb1a825ab0c4095efb777a4a04bd
SHA1

2aa107530dea608555fe12e649ba62dfb8c18095
SHA256

5b46a954c74a55b92b58165d518ae0558a26da021a9568db57ac8bfd47b4f77b
SHA512

477b68ed1dcc0a3b247b5dddd4d508a0cf01b7a7078e8e81e1158ea60491c69112e04fbd08e8f67408588b7ebbaf4a14bfb8f5852b047af806b235ed15faca7d
SSDEEP

192:fWXGEncxEpZ4kvo7IO+bRufxdEzHbrGRjw4c:O1auXvoUOqRkzErGq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2181fb1a825ab0c4095efb777a4a04bd

Files

2181fb1a825ab0c4095efb777a4a04bd
.dll windows:5 windows x86 arch:x86

0c66f6dc5140370899c433e55c35f286

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
GetProcAddress
lstrcmpA
OpenProcess
GetSystemDirectoryA
GetTempFileNameA
LoadLibraryA
Process32Next
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent

user32

FindWindowA
LoadCursorA
GetWindowThreadProcessId
CopyIcon

Exports

Exports

Exbcute

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 889B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 338B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ