42324a22c9263edef7d5ef08bf41a77d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42324a22c9263edef7d5ef08bf41a77d
Size

4KB
MD5

42324a22c9263edef7d5ef08bf41a77d
SHA1

59228fd880569ca08c375f5aaf40f5a76a3e35fd
SHA256

e7ccc5bf597fa002f05f55d29d9001e67d8a1be349cd0d39eba60c71d55cbb6e
SHA512

2355e6ee985d7ef1affdde51391db4ad5bcef361b5a6e21dde2d169a133e396ef98da669ec1f0ab0cc014fb28f69bd13c20dd12ea7bdc036d6c5d5d18fd4bf15

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42324a22c9263edef7d5ef08bf41a77d

Files

42324a22c9263edef7d5ef08bf41a77d
.dll windows:1 windows x86 arch:x86

ac5547a4cef5a0a41523374a369ff4b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CreateFileA

Exports

Exports

access_sub_license
cancel_lock_key
close_key
detach_from_dll
get_rnbo_lib_parameters
lock_key
open_first_key
open_next_key
query_key
set_blocking_mode
set_rnbo_lib_parameters
set_rnbo_windows_parms
unlock_key

Sections

CODE
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ