97564cd4fd65c44abef2d3e30c647744 | Triage

Sharing

General

Target

97564cd4fd65c44abef2d3e30c647744
Size

20KB
MD5

97564cd4fd65c44abef2d3e30c647744
SHA1

54f7a8348f094eca8b9355f965e48e43fabdafab
SHA256

dd0f3624bd1c579461610feca2aa840fda55cb83b88e78f1dc1504f0104ea2fb
SHA512

ba3da191b20ccb89beaec4ffcc1c635dc709e6297eae32caf4e182fc9739e34b18ac253479168688f8838dd24dd6e26e6ac43451f15aec7027cefca67314b2fd
SSDEEP

384:nLPMcSqjfuK4by9hzk83b41WN49y/Zd8R9qjX64:L/SGUby9tk8r41WcyER9qjXt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97564cd4fd65c44abef2d3e30c647744

Files

97564cd4fd65c44abef2d3e30c647744
.dll windows:4 windows x86 arch:x86

4f84bdeddbf4a40eb04c427baacdf344

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetModuleHandleA
GetProcAddress
LoadLibraryExA

Exports

Exports

DllMain
fhjobc
fnqmsd
ipouy
pyrmlve
xpijrml
ywtkae

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 752B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ