70eab5a1de1a944132cd5e54b11f1478 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70eab5a1de1a944132cd5e54b11f1478
Size

58KB
MD5

70eab5a1de1a944132cd5e54b11f1478
SHA1

1bfadfb9a9dad1d70d2acd35c9c9881eb9091450
SHA256

bdce6fa1e80d3a2ad1d0e556abde0f701669924f6afabf9f916d4ee535eb1999
SHA512

829eb2bc0efea56e0db5ae76ca6b6ce7e16b64cbd5ea56cac405a7eb444e27dabc8b7f9c2a4fa8177ee05767127492e00e164c85e13c4808a524beb1f83cadd6
SSDEEP

768:uwjcfy+4gNsVXFJ2et/SFeeNvTsXXt1e+q7LUIEzQZjkmPhzek39BJV4S:uwoq+LsVXPTtKECud1T2LEYkmJSIb6S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70eab5a1de1a944132cd5e54b11f1478

Files

70eab5a1de1a944132cd5e54b11f1478
.dll windows:4 windows x86 arch:x86

3f6372546361ed1ca3457e353ab257a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

_stricmp

user32

GetWindow

gdi32

DeleteDC

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 13KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE