713a16d00a127e8d7b0e01cd3f599d92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

713a16d00a127e8d7b0e01cd3f599d92
Size

8KB
MD5

713a16d00a127e8d7b0e01cd3f599d92
SHA1

7012c133b8c8381a5011a24d99b725498fe74159
SHA256

bffdf2301d656ca3bb671629868c6552ed96d612a1fbf8a8e20e738b0f8e8334
SHA512

a60a2b352acb7996598037849402fa787403fae5ac434f02948432c7d522c9eda096ab8de09e244e0d729da3258469ab4eea97ec572ca81d7c3ca4a4f77cf5a6
SSDEEP

96:PRbXpdo18NB91OILJOlrl+r0vx2qkePG9isuIkJWAF7E3:PRbOydOILJ6rlCSx2J9iZJXi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
713a16d00a127e8d7b0e01cd3f599d92

Files

713a16d00a127e8d7b0e01cd3f599d92
.dll windows:5 windows x86 arch:x86

178e588d62f89b28bf2ca14e6b13943a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
WaitForSingleObject
Sleep
LeaveCriticalSection
GetSystemDirectoryA
lstrcatA
EnterCriticalSection
GetTempFileNameA
LoadLibraryA
GetModuleHandleA
CloseHandle
CreateThread

user32

CopyIcon
LoadCursorA

Exports

Exports

Execute

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 537B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ