77f0ecfa8d733f7b645cff7b96954ac2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77f0ecfa8d733f7b645cff7b96954ac2
Size

351KB
MD5

77f0ecfa8d733f7b645cff7b96954ac2
SHA1

c22a76de10f5d6d957402908173872e3ee50f1e0
SHA256

3a6f22e2766c2119e27daa1dbc56273a214e45f30c27d988de2958753aeab730
SHA512

cdee8a766eaaa80f23c1a8fc967c96af1ab29d0aa08fa80ede8cc0e85cd8c1090345fc1a680764497cbda6f375fd57c3ad95f8ac6723c00ebbb1c19c6391e53a
SSDEEP

6144:o7J0CkO8daPzNVS52aUGL3Y/xo2iAfgBYoO9Z5ulXw441PDCXqsk7jJT3YE:AJ0C8daPzP3uLobiPBYI+hiTwj5R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77f0ecfa8d733f7b645cff7b96954ac2

Files

77f0ecfa8d733f7b645cff7b96954ac2
.dll windows:4 windows x86 arch:x86

0ec2cad07905425c0df3116609eb5a37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

UnregisterClassA

engine

?PushTable@KJxScript@@QAEHXZ

winmm

timeGetTime

Exports

Exports

InjectDll
UnmapDll

Sections

.text
Size: 235KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE