2441719ded8eb4e3b92dbfb2133555d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2441719ded8eb4e3b92dbfb2133555d7
Size

16KB
MD5

2441719ded8eb4e3b92dbfb2133555d7
SHA1

0ee90a6010d7aac9b6e1d5d90f474f556f5e94a6
SHA256

4dc0f8f73e8838703f2c1d9cd233b150c911d5b48cbd8afb083d15a13167aa93
SHA512

f5073694e51ac6333e0ae2e3f76f7a97c5b18c762e075efc2b76d6437f6ab4c3f465d83642ccbd443944ad7b1edc165b34e298809ab2c3241b7d02508ffd82ae
SSDEEP

384:zipmQ50ln094aU5iCMGaX0DLDPfG3ZRR:zipR5I09jVCMd0DfG3P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2441719ded8eb4e3b92dbfb2133555d7

Files

2441719ded8eb4e3b92dbfb2133555d7
.dll windows:4 windows x86 arch:x86

2265bc6022c342ab5700e57cfb8e5ece

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
GetSystemDirectoryA
HeapFree
DeleteFileA
ReadFile
HeapAlloc
GetProcessHeap
Sleep
GetLocalTime
WaitForSingleObject
CreateProcessA
GetStartupInfoA
CreatePipe
WriteFile
GetLastError
GetProcAddress
LoadLibraryA
FreeLibrary
GetTempPathA
WaitForMultipleObjects
CreateThread
GlobalAlloc
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
WideCharToMultiByte
CreateEventA
GetFileSize
SetFilePointer
CloseHandle

ws2_32

WSCGetProviderPath
WSCEnumProtocols

user32

wsprintfA
wvsprintfA

Exports

Exports

WSPStartup
attach

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ