70ef729d4db469fd1ca9b2bd82b68079 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70ef729d4db469fd1ca9b2bd82b68079
Size

15KB
MD5

70ef729d4db469fd1ca9b2bd82b68079
SHA1

02bb28f1263c6d3c315a2258566d9cf8dc841ec5
SHA256

6e9c529a6d831ff309acba74b6b969bb0f6250b48a570676db159f9cafe3f100
SHA512

65fa0b7ef1a68173bb13562966905a388301262d7bbaa9f226d970d4f34e35874d7047a12e00c6c19c4c97454bb48cabb0c6ad563f24468cfdb34280e2ad68e5
SSDEEP

384:I7azPKwmBMt0uK2JJSGQ2iymBxyywv5xnKASZPgQX:IezSz/uK2N9nm29vLPS1gG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70ef729d4db469fd1ca9b2bd82b68079

Files

70ef729d4db469fd1ca9b2bd82b68079
.dll windows:4 windows x86 arch:x86

18cdcca90ed64110c1ef2a21e8ffed9b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

KeTerminateThread

Sections

.text
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ