4e2eae0a8c1951e55a2e32c81e4d467a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e2eae0a8c1951e55a2e32c81e4d467a
Size

37KB
MD5

4e2eae0a8c1951e55a2e32c81e4d467a
SHA1

15375fadce2e3fb56089a9e8ce22bc322dc583b0
SHA256

41f4c0de541666da17b733307c5913d8a635736dd05d7f62b2a45a1fcde76c99
SHA512

99d902685e82c116f8c44e23961304e464ccea43938e403f3f341e924057e258ec224cac0c54d40be60d3f76a438ab41f6879deac508d9e0f2f66a01cd18ad91
SSDEEP

768:jBPh8HIBk8/AbtwrM4P5+jt27Cw0FUATeGSZcW2O6qyuxy+KhC:jBP+0q+o4PoWoeAQy+KhC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e2eae0a8c1951e55a2e32c81e4d467a

Files

4e2eae0a8c1951e55a2e32c81e4d467a
.dll windows:4 windows x86 arch:x86

c9ab7255aadce72a3536d73dc9062cf4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateThread
EnterCriticalSection
GetLastError
GetModuleHandleA
GetProcAddress
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
Sleep

Exports

Exports

DllMain
bajip
kfspyft
sjkubf
xwtcktk

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 162KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ