2d544be5c9efbe99f22c9fbbe52af08d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d544be5c9efbe99f22c9fbbe52af08d
Size

17KB
MD5

2d544be5c9efbe99f22c9fbbe52af08d
SHA1

47bbcf3310dcce39a8cce2e4cb9d6ca13d0253f6
SHA256

9a664690a07f8b45e291a611422eb8104f387e3e1754f496c6f7a1e9c47ff89b
SHA512

c605d37b32be79b5606554dc607f902be786c7a48677e0fb08562b1db357d86b4c9b12935a195483c3e895d19751eeed229a6df301e97dd8b8f451aa5d52eb4f
SSDEEP

384:Kr1RhCLtQpn4r8owSG3dBk1Z5GMbqkwz:MwJQpn4YMG8fGM+k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d544be5c9efbe99f22c9fbbe52af08d

Files

2d544be5c9efbe99f22c9fbbe52af08d
.dll windows:4 windows x86 arch:x86

1794003c480f5a71b6470a8f60a8c5b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualProtect

user32

FindWindowA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 274B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ