54899a892de5fc6f23ab991f1e498ce6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54899a892de5fc6f23ab991f1e498ce6
Size

9KB
MD5

54899a892de5fc6f23ab991f1e498ce6
SHA1

fd34175bf332383261c30abe559aa06289ebdf2e
SHA256

87ac2fcce57278ae5cb06b8cd77dc037bdd119ed54a36fe02eadb4179e50f19c
SHA512

ef5c5ff572553d1675c37c3f077b770238cc846202f02ae285658ff7677c65991944ac071e22254f76c2d399b9920dbaeca59f0e645b0dddf123ab0247d44d36
SSDEEP

48:CMiin+awL5br0QrhfpszlLvxPX/N+bNfxUiXydMkitWHdAsanjd+B0aCAJCaKDPR:AFnr3gvn+ZEMNW9zap+KaSfdnb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54899a892de5fc6f23ab991f1e498ce6

Files

54899a892de5fc6f23ab991f1e498ce6
.dll windows:4 windows x86 arch:x86

fd10dfcfb993971e23aa4dc402ed22a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
_adjust_fdiv
_initterm
sprintf
fclose
free
_stat
fopen
fseek
fread
strtok

kernel32

lstrlenA
GetSystemDirectoryA
CreateProcessA
DeleteFileA
Sleep
ExitProcess
GetModuleFileNameA
CreateFileA
WriteFile
GetFileSize
WinExec
CreateThread
CloseHandle

user32

wsprintfA

urlmon

URLDownloadToFileA

wininet

HttpQueryInfoA
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetGetConnectedState

winmm

timeGetTime

Exports

Exports

_DllMain@12

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 274B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ