7c13dd9295cc26e03dd0e6ab4c65ef99 | Triage

Sharing

General

Target

7c13dd9295cc26e03dd0e6ab4c65ef99
Size

42KB
MD5

7c13dd9295cc26e03dd0e6ab4c65ef99
SHA1

1667d9bae378f8ddf3c1e7e0cace1cbe6fb13448
SHA256

a6d899934a1c544a07001e0f6fdd11f64e2c6522dee1124fdfecf394ed1c9546
SHA512

2de352d7ad05986fa755df85cf9bbdcb48808d2a03a781dadaef3c2e19b9676bd72726a11293dfb477ee93f1a03bf0b9210a847fa5f2c05292ad7cdf9412564c
SSDEEP

768:hpslUKkcXst5qyGzYObN6qo4zW0UyfkAB1o9AmEH:rKUKkcXYqyG8XqzWmftvoJY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c13dd9295cc26e03dd0e6ab4c65ef99

Files

7c13dd9295cc26e03dd0e6ab4c65ef99
.dll windows:4 windows x86 arch:x86

405e179a1f8ad53b9adca74af9e95c96

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ