6ffa0ef3d42a97aa49b2dcebdb0932ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ffa0ef3d42a97aa49b2dcebdb0932ab
Size

41KB
MD5

6ffa0ef3d42a97aa49b2dcebdb0932ab
SHA1

0dfef06f82f83b02ccb09dd1b25b6c159a5a5794
SHA256

7155e4de457ce920ea3638f32a50fd18b913a6bd5cf7c9bfe721fe3f1f575c5c
SHA512

a65d0e499cc0ffb24d6c1cda7ea381ed344cab38ce342e8f7de1430cbde5270a01d4cbd6093a0a4dcbadcff77e0bce5526f2b7a2866be9cc4729b2f7bab4927f
SSDEEP

768:i58O32NhT/tSUVs6bE9oHCKX08clrnbcL0hLNKuzN3TkBG03Rl52cvMAS:abGNhxSU49MFX0L8LJuzhTkBG0Bl52Y+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ffa0ef3d42a97aa49b2dcebdb0932ab

Files

6ffa0ef3d42a97aa49b2dcebdb0932ab
.dll windows:4 windows x86 arch:x86

6eb6dca3609381fe1ab0e6a4ade1db16

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

WSAStartup

advapi32

SetSecurityDescriptorDacl

Exports

Exports

start

Sections

.text
Size: 35KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE