487e8f678f9c1e3f0a51cf3c3506bdb6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

487e8f678f9c1e3f0a51cf3c3506bdb6
Size

68KB
MD5

487e8f678f9c1e3f0a51cf3c3506bdb6
SHA1

34d45205f75bb836fb133996bd054604b9e4092d
SHA256

9f8d84c08712c6cdea444650dce4edc89b784e954e8aacc7a36429e897e012a8
SHA512

d25c0813b0bf23ec770456db6ccfb47d1ca4f1603f938388c4439cf41b9bffd56778be11853bbb359e0b4e2da9e27a6c1d8c5b2bdf654584b59a07c45a992e20
SSDEEP

1536:2Haf3N+zYfne0UuuDMtG0orzi7BZvDrMR1TzTxJON:iaf3NqOVuwPizGZLITTz1J0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
487e8f678f9c1e3f0a51cf3c3506bdb6

Files

487e8f678f9c1e3f0a51cf3c3506bdb6
.dll windows:4 windows x86 arch:x86

92914fded8a4ba0e7ee6cd99bd64e624

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
ExitThread
FlushFileBuffers
GetSystemTimeAsFileTime
GetVersion
OpenFileMappingA
RaiseException
ReadFile
SetEndOfFile
TlsSetValue
lstrcatA

msvcrt

wcslen
wcscpy

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ