44bce8c36fde8048d5427113e2564323 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44bce8c36fde8048d5427113e2564323
Size

353KB
MD5

44bce8c36fde8048d5427113e2564323
SHA1

527c047a5ec96a309cb240c3cdd4a81906fb895d
SHA256

e01fd10d42a935aed2ec57ace11414f6fddf0060306b858ab1e306b2bfadcd68
SHA512

eaf37acaacb778c95ef39a48b02cf1fcb0a79146de407c5bd23be30e743d3b006f478afa5eecb9f43c5c067d4c970379149c3f9587e447fd0cefd742dc22e529
SSDEEP

6144:Af4HlDW0r58NKNsdmPku7W1ZI9y3JcwotLUGlg0h+CChDo:AAHtW0GKNsdmPkGWI96cHBfwCQo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44bce8c36fde8048d5427113e2564323

Files

44bce8c36fde8048d5427113e2564323
.dll windows:4 windows x86 arch:x86

6f07ea296e3740277307fda1cca921e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Beep
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
FormatMessageA

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ