45df5de47f6aaf37969884368a07a3f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45df5de47f6aaf37969884368a07a3f3
Size

374KB
MD5

45df5de47f6aaf37969884368a07a3f3
SHA1

869e3ad238561c13a1b9ef81a3b93f580a3428f1
SHA256

e010c63bc83b12a2119fe4edae182f94a7277ad33b03525fa0cd1a9a2d5abb99
SHA512

e3ff3003cf968f6bf5715816298e3a9962a3b2492876ddb2d13358e6d30879b496009c6c77a43c490f777cd168a67448e920617f27a5ea6701bcb533638c90d7
SSDEEP

6144:VUGsgskFovfbZo2b/UOTg0K2jKkI6m+HkbYd9zyl8Jusx2Dj+Xu:7+MoLZoW/oxbr6VHkkOkusx2Dj++

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45df5de47f6aaf37969884368a07a3f3

Files

45df5de47f6aaf37969884368a07a3f3
.dll windows:4 windows x86 arch:x86

4ae8cce1cdb668a8fad907517a62efc7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
ReplaceFileA
Beep

Exports

Exports

dxehwpde

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ