566cf5bf2489bfbd99a96b924263d36d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

566cf5bf2489bfbd99a96b924263d36d
Size

88KB
MD5

566cf5bf2489bfbd99a96b924263d36d
SHA1

1db5fe7e0d9187791b5d336ba650bc49f256f7d9
SHA256

1c00cfebe959c59086f7480b494db81d72fa3576ba4f461074438fa5949d4f2f
SHA512

647464ac0ef55a798e60856c4fc93e36c9a609f9a9e3f2828055f2a2cfa56dc539c6f6a0cc885dd8447d6b0e4c0bbb2bfc9adcc1367bde4cad421f9e783d557e
SSDEEP

1536:TOMnZIflmbR8eh7/PIsRrsVTA1a82lqAf2GqtI0n/Shic0s0o+7:TbIfC80nIoNa7l7fKtI0aD0o0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
566cf5bf2489bfbd99a96b924263d36d

Files

566cf5bf2489bfbd99a96b924263d36d
.dll windows:4 windows x86 arch:x86

303db7f3aed1d3eb41894a03c6d3735e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetProcessHeap
GetTickCount
OutputDebugStringA
HeapFree

Exports

Exports

_WUHGMGY@0

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ