979eaed3b3966e8c8a461292a9c02955 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

979eaed3b3966e8c8a461292a9c02955
Size

72KB
MD5

979eaed3b3966e8c8a461292a9c02955
SHA1

e83d2578c0069206714ac7d0426cb4f675475f58
SHA256

619b24972e0624dc049f9cdc5c2423a30a0085d857cdbced4ee1b030e57f98df
SHA512

08227396e9681d9c34ea450f67fde2b1d1c42b8b2b9f2ba1bedaab8bddc759dc393da48b0492f65eb56b37debe64abbad158043f7a5fa4a3574e052906035bf5
SSDEEP

1536:gJ0GmeQPjpEe+5GnU1/8YUllZ/qWy47wfpi++aha47N8gI:C/meQbfU1/8YUllZ/qWy47Faha47C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
979eaed3b3966e8c8a461292a9c02955

Files

979eaed3b3966e8c8a461292a9c02955
.dll windows:5 windows x86 arch:x86

96de048e5e9070a1428d32aec307a9a4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

rand
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
getenv
_snprintf
malloc
memcpy
??3@YAXPAX@Z
free
_itoa
_strdup
_CxxThrowException
memset
_purecall
realloc
_except_handler3
sprintf
??2@YAPAXI@Z

kernel32

GetModuleHandleW
GetLastError
GetVersionExW
DeleteFileA
CreateFileA
CreateProcessA
CloseHandle
WriteFile
Sleep
ResumeThread
WideCharToMultiByte
lstrcpynA

Exports

Exports

_N311

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ