70dddf81ce6a01d6be9716b7537899df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70dddf81ce6a01d6be9716b7537899df
Size

18KB
MD5

70dddf81ce6a01d6be9716b7537899df
SHA1

ffd2e5dcc59b236c4e3fdc964490e36d71326f0a
SHA256

0dfaa5cbd891808fe2a7de2906a1466509663bd3af1f732c72b8b8fe8814be6a
SHA512

2234ce4c55c51bcab5df774ee549c1a1710e288b98bb8573833b17afafc3a330fd9503b67864986b3f3ad583ace141507e28c7b75f7911d50b577cd37533fb1c
SSDEEP

384:Csh0T5CtTvrZhsfvrFQbSxI4TFXrXnO6/2oYAPDWZxH:di0LrZhsfi2PTFXDl2gPDWZxH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70dddf81ce6a01d6be9716b7537899df

Files

70dddf81ce6a01d6be9716b7537899df
.dll windows:4 windows x86 arch:x86

1aaa0f74692555dee58c285e6b653b20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

wsprintfA

advapi32

SetSecurityDescriptorDacl

msvcrt

strcpy

Exports

Exports

input

Sections

.text
Size: 13KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE