7d36069721e1299580e99bc96fce3c95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d36069721e1299580e99bc96fce3c95
Size

263KB
MD5

7d36069721e1299580e99bc96fce3c95
SHA1

6058ab23d2f253b19db0a21f72ff724cb82ceb17
SHA256

624d4de3a182f7ee86e40859fad76c6d509eddefee7f5fd8d44ec5c9f2ba89ac
SHA512

ee0d16645e0eb88cfd2acaac3085622392b44c6772a8c94fb97ee1d054ee5cd75b0d9d776c9be4d564b1eaebb787b67397216845b775328425c82a115c6c91c0
SSDEEP

3072:vJwo51EgmGyi15NiWbeIMvhJaw7tGeqRXjKiwMET87xF55PuC5Pzq:veo4gm8iWbehawYj7ET87B5PP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d36069721e1299580e99bc96fce3c95

Files

7d36069721e1299580e99bc96fce3c95
.dll windows:5 windows x86 arch:x86

38e3cd5408f10bb6210e22b9c65ce964

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetStringTypeW
CreateIoCompletionPort
LoadLibraryA
GetDateFormatA

user32

CallMsgFilter

gdi32

GetMetaRgn

advapi32

LsaFreeMemory
GetServiceDisplayNameA

Exports

Exports

fkpuljxlsfuu
heqlmlxxxkugtb
kysosaytmzx

Sections

.text
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ