528758ae1f2637b3b9a72a7d7e3e4f48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

528758ae1f2637b3b9a72a7d7e3e4f48
Size

20KB
MD5

528758ae1f2637b3b9a72a7d7e3e4f48
SHA1

ce9f998fa8457c5aa609452b77665aaeccafdb44
SHA256

8452bf7fa4dc9965e1af497ed22c20b842f509a2f5e440eb539a4f31d9248c29
SHA512

96b1446c504a12253e7b303e73128828ed0d6aaad2e64d5306157f8ec31d0456efd8e5680ee25f9bedf2762ace2a352a0b1952796d2ee19735995d60c7ddd63d
SSDEEP

384:vlOeKiXdssGC1MCweNom7eZLU/Zlq2eU2o9fL8gbA7A/:tNSssoPeC/Trw+TbAy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
528758ae1f2637b3b9a72a7d7e3e4f48

Files

528758ae1f2637b3b9a72a7d7e3e4f48
.dll windows:4 windows x86 arch:x86

c69cb512102b95d438470faf2187cdd3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
HeapFree
HeapAlloc
FindClose
FindNextFileA
FindFirstFileA
lstrcatA
GetVersion
lstrlenA
lstrcpyA
GetWindowsDirectoryA
WinExec
WriteFile
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetProcessHeap

Exports

Exports

_f@8

Sections

.text
Size: 1024B - Virtual size: 789B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ