450a07c6b241bf6e3db40b76b7fb7980 | Triage

Sharing

General

Target

450a07c6b241bf6e3db40b76b7fb7980
Size

24KB
MD5

450a07c6b241bf6e3db40b76b7fb7980
SHA1

c3d5cc474c5def0122c7a67f064181405d6c76a1
SHA256

d9e3a9ccba085c0f497b92b536b24bb5cc3fa58ac4afe2fe92430e840afa5a2e
SHA512

96376b87189c5b9d36e81b2c26dd6931bfe34c292514b1093ef16162556b5921bece2a8801208647a56fd757904b09ab3d90354eef8e23da577d25be398f9fa3
SSDEEP

192:RAaIUQskeuqZSEEivG8JDrbbcSQdY989Y96/FbJWnrUFFIYTf0arqvmpct5UUNkP:PPkebZSERrH3ccwMuVqvmpct5JNkPX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
450a07c6b241bf6e3db40b76b7fb7980

Files

450a07c6b241bf6e3db40b76b7fb7980
.dll windows:4 windows x86 arch:x86

7e5db91fe5a80eec3dd93ee5eca6686c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

closesocket
ntohs
ntohl

msvcrt

memcpy
atoi
free
strcmp
malloc
_adjust_fdiv
_strupr
fwrite
time
strrchr
fopen
fseek
ftell
??2@YAPAXI@Z
memset
fread
fclose
strstr
strchr
strncpy
??3@YAXPAX@Z
_strlwr
_itoa
_initterm

kernel32

TerminateProcess
CreateThread
GetModuleHandleA
LoadLibraryA
CopyFileA
GetProcAddress
GetTempPathA
WideCharToMultiByte
lstrcpyA
lstrlenA
ReadProcessMemory
lstrcatA
GetCurrentProcessId
GetCurrentProcess
VirtualProtectEx
WriteProcessMemory
GetModuleFileNameA
Sleep

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 842B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ