4f440939aae12b11a1cd2d53c773f4d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f440939aae12b11a1cd2d53c773f4d8
Size

18KB
MD5

4f440939aae12b11a1cd2d53c773f4d8
SHA1

f9fb425c9296f134d47a7b0e6021c6a4b0ce6324
SHA256

db001f61013bb0b3c395186d1dc40f5c7991fafc070faa4a80645387f9046419
SHA512

3a404d549a410059f7cb4d1ef749235fbf568ebabe36560a1eb930883e561ecdabd1b3d48cd431a8d0fac5d8231448fc335280ad8cd2bf8416a071be14280366
SSDEEP

384:opuPwafnZ509n2SUf86olktS01jaNetOa8+NCtT:od0ZOCXoYPj0ZJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f440939aae12b11a1cd2d53c773f4d8

Files

4f440939aae12b11a1cd2d53c773f4d8
.dll windows:4 windows x86 arch:x86

c1f8dce0359a302284d52a7ed373d7ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

_stricmp

Exports

Exports

input

Sections

.text
Size: 13KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE