522f6c0ad646fde6db674eefbe534d96 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

522f6c0ad646fde6db674eefbe534d96
Size

100KB
MD5

522f6c0ad646fde6db674eefbe534d96
SHA1

2b12ef9ea7a32e2f53aa8db695c5bf8f13477dc3
SHA256

279fbb072aba34d225aed668a8cf13d6f6462040218519c2afdb82891dfb6685
SHA512

f88006b69559762334172467b9543eae27bdcbe6d2e3aaba1f37e8c4541877fefddbf771ddf4751ea0ca768208b35d4279da2d9ee6c1f220fc864ac450837b16
SSDEEP

1536:A40Igo9PNoJ4GCixFyqlg+J2D1IPBYbLjkgMZgEX3VgMJ+J:cIT9PNoJ4GrrpJ2D1ISkgMZgKSMJ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
522f6c0ad646fde6db674eefbe534d96

Files

522f6c0ad646fde6db674eefbe534d96
.dll windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

WlxShutdownEvent
WlxStartupEvent
t

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ