382258edbbbd2fa457d71daba12c4a97 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

382258edbbbd2fa457d71daba12c4a97
Size

412KB
MD5

382258edbbbd2fa457d71daba12c4a97
SHA1

1c625fadff1b7a509a6eb16b72651467354266d0
SHA256

508a816001e6d2f7b6617d9009e97c533d02d366055dad4eb17a9ee38915fa4b
SHA512

c7b40da513d2c523596a9027a30593c0398903235109f1ea4a2157a4300625ef3e7eebb437f1e61074b9c65af80b390020d5b4d21929508d5141390a729e1d59
SSDEEP

12288:dj7h2c14HhTh89Oi2Un6fldp0L2P7ys+:dj12ciHhN0OdfG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
382258edbbbd2fa457d71daba12c4a97

Files

382258edbbbd2fa457d71daba12c4a97
.dll windows:6 windows x64 arch:x64

1b39fdd128f4435e110614f6dc1ba005

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetThreadPriority
TlsGetValue
WaitForSingleObject
GetCurrentThread
LoadLibraryA
VirtualAlloc
VirtualFree
GetSystemTime
GetProcAddress

Exports

Exports

KcoipLbdsoiIjntoddll
QargxorzxueRbejmlkfkaggpnmv
StartW
WhsjvlmIcspozytrh
fgrererere
qwwwwww

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ