8596245f405b06f4011481bc25918381 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8596245f405b06f4011481bc25918381
Size

512KB
MD5

8596245f405b06f4011481bc25918381
SHA1

d649ba6c488915856adb8b424ed989aca09c1fdb
SHA256

8b20de4016b08212ef0d4cea7f55f34a57051eb063e9a6eb8d997941372e5f8a
SHA512

b702a7e9d3ff0b9a984ee2009f5ffbbf39fc4dcba7cd2990deb11e0871c344105196a3e0147b2e547913f56ee889340012fffc3cdd4a7b8df7b341ae93f18188
SSDEEP

3072:nwMUrRiqvXXin/xfaakEW07wS0GeoFi8n5qzl96:wMKRHXcaHEP7wSHzln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8596245f405b06f4011481bc25918381

Files

8596245f405b06f4011481bc25918381
.dll windows:5 windows x86 arch:x86

1c43169856f83738adaedef26aab5a68

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

K:\Bin-prefecture\YLHNCKServer_二次注入_可选择有无打包\Release\YLHNCKSC.pdb

Imports

kernel32

CloseHandle
CreateThread
CreateMutexW
GetLastError
ExitProcess
VirtualAlloc
Sleep
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 651B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ