8fa6fd65177379bdc2505edaa7eb1ae2 | Triage

Sharing

General

Target

8fa6fd65177379bdc2505edaa7eb1ae2
Size

4KB
MD5

8fa6fd65177379bdc2505edaa7eb1ae2
SHA1

7086c8598b7f412731ac38be8388f086ab145a31
SHA256

902197321d681652ecd7782fd9242512d23e44bec73419d63819ac04f5fe8b27
SHA512

643a0f3cca0466614e3f1b95c27371f1325b051938a43062be785d880dee99097a07c63707b0bc1f235cd18c65cd5d1990c52dfe6620890fa33c2fc1b6686b0a
SSDEEP

24:eH1GSyk8zX0lVY+AQ5gdaut2pZQi1iKHlcXglQp274C+/lXgwFU3K3RbRkjudbjC:yyk8regdam2pZp1i6lc7HlPbkKNfPY0A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fa6fd65177379bdc2505edaa7eb1ae2

Files

8fa6fd65177379bdc2505edaa7eb1ae2
.dll windows:4 windows x86 arch:x86

d7d03cfcde314dd9338220f955e0c9a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetProcAddress
LoadLibraryA
ExpandEnvironmentStringsA
lstrcmpiA
lstrlenA
DisableThreadLibraryCalls
CreateFileA
WinExec
CloseHandle

advapi32

RegEnumValueA
RegDeleteValueA
RegOpenKeyA

Exports

Exports

DriverProc
auxMessage
midMessage
modMessage
mxdMessage
widMessage
wodMessage

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ