23f04b7aa023dfc93da0dc572274eb5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23f04b7aa023dfc93da0dc572274eb5f
Size

14KB
MD5

23f04b7aa023dfc93da0dc572274eb5f
SHA1

9ae7572362654cdd223cf43025ccda8fc810bef5
SHA256

39797fe38903b55d82e9d2688f7f3313f005ded063ca247d7a509aceae050e28
SHA512

6d0c6883535dbe879a848b4a075255ef856aae8dac6f96c24a20571ba319bea6703f40bbd77f1364b114ed0c976f59c5ec38f8fb8e751397efa29f162b5a30c6
SSDEEP

192:0oCwnYy+ttMMlF9Eo/aZ0jwnnFT9zHJ4ESF3GZfVUH9CzT9l:QTx7Sl0knnFTklAUdCd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23f04b7aa023dfc93da0dc572274eb5f

Files

23f04b7aa023dfc93da0dc572274eb5f
.dll windows:4 windows x86 arch:x86

76f306cedf8a1dd05e83e6794ab8d0a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringA
GlobalAlloc
GlobalFree
GetProcAddress
LoadLibraryW
ExpandEnvironmentStringsW
WideCharToMultiByte
lstrcmpA
GetCurrentProcessId
lstrlenA
LoadLibraryA
WriteFile
CloseHandle
CreateFileA
lstrcpyA
lstrcatA
GetSystemDirectoryA
FreeLibrary
GetModuleFileNameA
HeapAlloc
GetProcessHeap

ws2_32

WSCEnumProtocols
WSCGetProviderPath

user32

wvsprintfA
GetClassNameA
GetWindowThreadProcessId
EnumWindows
CharLowerBuffA

Exports

Exports

WSPStartup

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 666B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ