5974f483ac963e51a01b20650ddcd822 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5974f483ac963e51a01b20650ddcd822
Size

120KB
MD5

5974f483ac963e51a01b20650ddcd822
SHA1

ec080d2e10dd47e279bb03ab13756b607f7c23b4
SHA256

d312c9782d912edecf0ff07b8b763f4a8097d5fc815eef374fee1ea1496a1499
SHA512

a2ef5e93b4583111c991e74cd4f7b8ae9880ee6642ebd58f602844a92e2925086a4a710ad45fd2a832cd09957385820ea0201285d35e9fead2d40d5ca987483d
SSDEEP

3072:Y05AoL9FtrIBo46RwmkJq53nMueCHFDZKQV:551FWr7uXeQ1ZfV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5974f483ac963e51a01b20650ddcd822

Files

5974f483ac963e51a01b20650ddcd822
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ