4d11696f6ab09e9d7eaec79e4f060d19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d11696f6ab09e9d7eaec79e4f060d19
Size

18KB
MD5

4d11696f6ab09e9d7eaec79e4f060d19
SHA1

8e899b2d4be188ab57e9062fa17eec42d1c9016d
SHA256

b805a6179f1c6e400e465ad61b38fc203a90e124491fc9fe20eecc3788918887
SHA512

6f0273cf7bac77cb96b59f12ad1ff6e486c9befa775e70c6f40717d9f9ab90d21175b78dcd44ce0672544c9b1f5239f41e0d42c4246a62064874ee8fbc22c1ed
SSDEEP

384:xKgwfHABHkkOeXVu5sEdspV73LnIHtcQpWK4Hgbn:cnfHwHeRsEepV73Ln4tcMPqgbn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d11696f6ab09e9d7eaec79e4f060d19

Files

4d11696f6ab09e9d7eaec79e4f060d19
.dll windows:4 windows x86 arch:x86

eb378e473db29836c21de55079eea784

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

strlen

Exports

Exports

input

Sections

.text
Size: 14KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE