8dc45607497ec62a5f56e5f2c530738d | Triage

Sharing

General

Target

8dc45607497ec62a5f56e5f2c530738d
Size

80KB
MD5

8dc45607497ec62a5f56e5f2c530738d
SHA1

7e362c61d2335ce74a2b44e93c2ec039e559b8c0
SHA256

70bd9ab0f4288c757924bef661599c09e6d8997302df891c4663fd89a9429d45
SHA512

e684980b68b64ece2d746da8303a2136d3d2ef052ddb31c66a04a8dfb68d09e3041083f06a8a505cf625d939b409df51a314eeb67880f1a7438dc5628c8356d4
SSDEEP

1536:ymFjlKsUIg71ePAeTVu3f0LbqSJcmCifFmxG5hmKYFqoY:Zjl+Ig5ePDTVA0L2SJcmCiQx2hr2qoY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dc45607497ec62a5f56e5f2c530738d

Files

8dc45607497ec62a5f56e5f2c530738d
.dll windows:4 windows x86 arch:x86

a249652b606dcd37e4836a9bce0a4beb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
Beep
InterlockedExchange
Sleep
InterlockedCompareExchange
HeapFree
RtlUnwind
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapAlloc
SetLastError
UnmapViewOfFile
SetFileTime
GetFileSize
GetFileTime
CloseHandle
CreateFileA
MapViewOfFile
CreateFileMappingA
SetEndOfFile
SetFilePointer
HeapDestroy
SetErrorMode
LoadLibraryA
GetModuleFileNameA
GetProcAddress
DeleteFileA
GetLastError
ExitThread
GetProcessHeap
EnumDateFormatsExA
ReplaceFileW

Exports

Exports

zsifm

Sections

.code_01
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ