409d17ff248ff492c46c6a7bf028b060 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

409d17ff248ff492c46c6a7bf028b060
Size

106KB
MD5

409d17ff248ff492c46c6a7bf028b060
SHA1

9b6c426ef4ef78a6f0f864c6aa0373e86f6c161e
SHA256

5f1791794079924c8f3a4154be8a33828e8a1d15be010bf9da8498eead86138a
SHA512

a20688bdddb10032a668f5c4a8cbf084e2fe3af2545e236984e216d0920b721b26d29c04296037019cdda0bb6a671233f5096044bc4cec1f9b7f05cbd09507c4
SSDEEP

3072:PaubsvpH0O4czKLwKswc6XQJVRAU5agiH0:vsvpH0O4GdcdU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
409d17ff248ff492c46c6a7bf028b060

Files

409d17ff248ff492c46c6a7bf028b060
.dll windows:4 windows x86 arch:x86

4b83e21e8c718d04995650a1b1e5af97

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
ExitThread
GetTimeFormatA
LeaveCriticalSection
EnumResourceTypesA
lstrcmpiA
lstrcpyA
lstrlenA
lstrcmpA
CloseHandle

advapi32

RegOpenKeyExA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ