4e95fab6fbe300f08181c19276545a0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e95fab6fbe300f08181c19276545a0c
Size

68KB
MD5

4e95fab6fbe300f08181c19276545a0c
SHA1

58996830a585743365cfc3db2f16447f15dd56a4
SHA256

4ed1dec3e43ad620750bf2b69f1e5d712f7bedacc6dc24850860811fd2ff7b89
SHA512

7c4c31c8ef1c356d94104e25a79751a4def29f0579e17e3d96233cc57278d1cfb1f9be058fb55e703035558a7cd3fb660fce5479d442f4d9549e2511c3f58fe9
SSDEEP

768:jMVkm7RC3QwsThHhH79d7JZ9KFAbv6F6cO86npuWmlqrOwk9sYUcH4MTgkdgoVmM:ldsTDZKFQyF686QWViUQtlBUCxQjgVZL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e95fab6fbe300f08181c19276545a0c

Files

4e95fab6fbe300f08181c19276545a0c
.dll windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
dll_inject

Sections

.text
Size: 50KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE