7df440c6360a99ceddab532ecef57b74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7df440c6360a99ceddab532ecef57b74
Size

6KB
MD5

7df440c6360a99ceddab532ecef57b74
SHA1

9800ed200b3b48d93e859c9f830ee36e9125951a
SHA256

e8ecda9973e8853a15de08fe1e04d287ff316ffac5513b65f45a95681d914061
SHA512

8286052f3a9a7b048dfced8975c36d573f36647ba9c6c3689ef3c8b52ce47ca7ef67b3a5b7c1d8d684146ad23efab4923c4c8f4f90719c1aa2ea210985f53e5c
SSDEEP

96:OBipzieuD3GOnLPJqQwmprii1pGAph1u2:uj7ToG1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7df440c6360a99ceddab532ecef57b74

Files

7df440c6360a99ceddab532ecef57b74
.dll windows:4 windows x86 arch:x86

3f32496dbc6dd744dfaa617a9cd2ae34

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

NtCreateFile
RtlInitUnicodeString
ZwQueryInformationFile
memcpy
memset
ExAllocatePool
ZwMapViewOfSection
ZwClose
ZwCreateSection
_stricmp
ExAllocatePoolWithTag
ExFreePoolWithTag
ZwUnmapViewOfSection
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
strcat
strrchr
strcpy
ZwQuerySystemInformation
NtBuildNumber

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 526B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ