2764f3dba48883a2c7ec456f06974a06 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2764f3dba48883a2c7ec456f06974a06
Size

708KB
MD5

2764f3dba48883a2c7ec456f06974a06
SHA1

d8b7f55d0b94326affad38d2a68844f704267e43
SHA256

e211a8c708f02e1be06bd3f49ef58147b50646b3618dedcbc505f753a671be6b
SHA512

7b8c468ebc88d73cbc4df61c743834aa23bd414b679117f86479bb9510cb5e2ae4c96ef549bd89c7ffee70cf188bd435945e18ebbbb425c2419c441539dcf849
SSDEEP

6144:J8bZwDv5GYqwOWZ4vvxyAznh5/a7AIcJIZwv2rYdd5VtUo+:+bWBGYqGAbT/a7ADqWko

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2764f3dba48883a2c7ec456f06974a06

Files

2764f3dba48883a2c7ec456f06974a06
.dll windows:4 windows x86 arch:x86

682ae5dbb12becb86e5860dafe75264a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

realloc
__dllonexit
_onexit
_initterm
_adjust_fdiv
sprintf
free
??2@YAPAXI@Z
malloc
_stricmp
_putenv
strrchr
printf
??3@YAXPAX@Z

kernel32

GetModuleFileNameA
FreeLibrary
GetProcAddress
SetErrorMode
InterlockedIncrement
LoadLibraryA
InterlockedDecrement

user32

GetSystemMetrics
CharNextA

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 787B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 628KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ