6696ae8b6f196e4eb23fbbbb87e43c04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6696ae8b6f196e4eb23fbbbb87e43c04
Size

12KB
MD5

6696ae8b6f196e4eb23fbbbb87e43c04
SHA1

19fd959143bb706b68fd5315f34d9c1242d2b306
SHA256

9840699e3a812f9f4aea5945cb975df4935de2aadda86c40c9ee9049de288be6
SHA512

eb29ab8cb133e184876a54e28e22d5d99a651fc87da75e1fc3ca0bcc535026f656914f66deacee88e74f3f37ae378bc8f82c52c5519c9a5ceafaebfb8db2eb5f
SSDEEP

192:NDOth3gLte01Yxx0R8fBaRbGFnBO1novHtVqI670fvX+2aOdp:sWY01YnA8fBsynBO1nsD4wmwn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6696ae8b6f196e4eb23fbbbb87e43c04

Files

6696ae8b6f196e4eb23fbbbb87e43c04
.dll windows:4 windows x86 arch:x86

1701423ae55bb443bfb9c3cd18dedfb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualAlloc
GetModuleHandleA
VirtualProtect
CreateFileA

Sections

.text
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 66B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ