560cf48cafd9cbd2fad33a9e689f3f29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

560cf48cafd9cbd2fad33a9e689f3f29
Size

17KB
MD5

560cf48cafd9cbd2fad33a9e689f3f29
SHA1

2c717466cc3ecadf7b4eabf9db203d089c4aba22
SHA256

6140130bb5d03e9ab2fb4040d414b063d24d43b2fe8ce28a92b326165e53643f
SHA512

597b20e7c2bde67bec3b9efae0e2b0584ce2921138b5da738b58fbad484fae170773945f7fd87ccaf37701b0ff5a18e32f66cb5005787812b2eb9d8cfcdc0f3d
SSDEEP

384:DwhxCxxl9VtJq1Wp/L6O/SGFECsXmYq3wkIc:DEQ3V3p/LtSacmRwC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
560cf48cafd9cbd2fad33a9e689f3f29

Files

560cf48cafd9cbd2fad33a9e689f3f29
.dll windows:4 windows x86 arch:x86

9951ed9cbd1ac28af7ef1eef107f61ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

WSAStartup

advapi32

InitializeSecurityDescriptor

msvcrt

_strdup

Exports

Exports

input

Sections

.text
Size: 13KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE