771527d4adef30c9eb475958fc98d630 | Triage

Sharing

General

Target

771527d4adef30c9eb475958fc98d630
Size

8KB
MD5

771527d4adef30c9eb475958fc98d630
SHA1

f963fd07bdc0e740f67e2fd8653c152aebed3cc1
SHA256

54a9ae567d4763dfd533d7f32fc7181acad19005ced5a63dcb24e7d9a3cde29d
SHA512

6fa4ff33da6aeb552d46562dab43aa33f1529fcf607c4aab070316621e3a1eb417ab2e30e1dd576e98a074d0ed5a2fdd8ad33a7715d4acd34c5124bafcb45c5f
SSDEEP

48:i7uD6XmotviCNIA734mkhthkYkJggydF5/6+D9yhumVIkjC:4WIgA73xJgXdL/9D9yhum

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
771527d4adef30c9eb475958fc98d630

Files

771527d4adef30c9eb475958fc98d630
.dll windows:6 windows x64 arch:x64

57d6e7112c8e716cfe2eb0ff9f36763c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ReleaseSemaphore
WaitForSingleObject
CreateEventA
OpenEventA
ExitThread
ResumeThread
CreateProcessA
GetThreadContext
SetThreadContext
VirtualAllocEx
WriteProcessMemory
CreateSemaphoreA

Sections

.text
Size: 1024B - Virtual size: 807B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ