638470e6d1ef328c31dceabce656dc58 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

638470e6d1ef328c31dceabce656dc58
Size

5KB
MD5

638470e6d1ef328c31dceabce656dc58
SHA1

026cb1080476703ae82400e9372298eb76f0b30b
SHA256

6807ef1f6a57828f9b9bcb577d8fc0128801ac68ca6fd5acbb8a9066adfa3ef7
SHA512

fb8f0063f82b280617b2996c1040c0d20a41824e0642c76d1f75054173d89dc39d065716459b1f6fdafd2a044ea4fd338eefea05e189ec51fbb610bcd9bc2b75
SSDEEP

48:iEzfuZ/+XU7dm79nYRxfJgqTC3rW0IVjxPTKvFGVX2nhaBAhPo7lWOtnJ:qZ/Gom9y95CpIdFTbX2sqhA5WO9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
638470e6d1ef328c31dceabce656dc58

Files

638470e6d1ef328c31dceabce656dc58
.dll windows:4 windows x86 arch:x86

dd5f595b09450a79ec057332bd2c64ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

RtlImageDirectoryEntryToData
RtlImageNtHeader
strchr
strncpy
memset
memcpy

kernel32

GetModuleFileNameA
VirtualAlloc
FreeLibrary
CreateThread
LoadLibraryA
SetUnhandledExceptionFilter
GetModuleHandleA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ