4b5ee9abde1e227a04c2048aaa3878d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b5ee9abde1e227a04c2048aaa3878d8
Size

213KB
MD5

4b5ee9abde1e227a04c2048aaa3878d8
SHA1

9a7f72f69fc66d2aac0687f272d7c242e16fd4ec
SHA256

8ace1f3a84938eb6298c3d923a32b6244db78c4016815d0ddfd86e9a0d387d9f
SHA512

28c0527496ac1574c758b6db791d31ef4941691a533a1652b5405b1bda33bef78e25ec080b3a85adf8d48fac0b95c1c4c34fd856cb18fcc458e1d73bb337da43
SSDEEP

6144:jiQC7/Zygdi78nwCPUT6JgNgtyqffjsr7p6twxYxh2:KDsgdi7Cl9gKMqTsr7ptx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b5ee9abde1e227a04c2048aaa3878d8

Files

4b5ee9abde1e227a04c2048aaa3878d8
.dll windows:6 windows x86 arch:x86

2d10f213308ed229b8247cfc0f9da99c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualQuery
VirtualFree
VirtualAlloc
SetLastError
VirtualProtect
IsBadReadPtr
LoadLibraryA
GetProcAddress
FreeLibrary
GetNativeSystemInfo
HeapAlloc
GetProcessHeap
HeapFree

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ