778421f6d9bdd2c0e32cb6331b2ff82b | Triage

Sharing

General

Target

778421f6d9bdd2c0e32cb6331b2ff82b
Size

19KB
MD5

778421f6d9bdd2c0e32cb6331b2ff82b
SHA1

f7ca2e571f25e99aef73ad774b77fb411c3401fb
SHA256

d71e8b65c2d84df38ef30aabdd16e6cc041df9641afc5d3112c85f7e24a47f7e
SHA512

37c8840026572b77bc67ea9cb22bb53244e8f102fdf7703ee35e9e9901362e475bce1f1665b666da4e50e0c3460eea908d46b315371523e7b4a7f7afd2f438b2
SSDEEP

384:maiRy7/vNYUZw2jcmS8HbLS3n+U+TPepKnXN9:ZiR4lf7lSiS3+UAepKn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
778421f6d9bdd2c0e32cb6331b2ff82b

Files

778421f6d9bdd2c0e32cb6331b2ff82b
.dll windows:4 windows x86 arch:x86

c1f8dce0359a302284d52a7ed373d7ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

_stricmp

Exports

Exports

input

Sections

.text
Size: 14KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE