56a6e2abaff17f6bf2ad9f4b3cf33a3b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56a6e2abaff17f6bf2ad9f4b3cf33a3b
Size

7KB
MD5

56a6e2abaff17f6bf2ad9f4b3cf33a3b
SHA1

ebaab0bbac856c36290543798ede3178cc003354
SHA256

63f10d4ee80d3bdca45f88a8de79c86c6fa89ba0de6821875c0a8ea21aa5e56c
SHA512

1b3b2870ec2d100dae544305cf3b2778de32525bcbabc43a93d61e591280781b3cf761a7cc3fdc5fe85765cf4e9ba48aed206a3d49f1bf37301f07ba5dcc5518
SSDEEP

96:VSklSQW9dJ2Y5iVdznMiisok4JGkY96dgU8arYdXHhrFoxQn:VSklowBznViBQkY0dq20

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56a6e2abaff17f6bf2ad9f4b3cf33a3b

Files

56a6e2abaff17f6bf2ad9f4b3cf33a3b
.dll windows:4 windows x86 arch:x86

d47ecd0ed935aa030a1b2427aaf9b86c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrcmpiA

Exports

Exports

t

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ