9996bc7eca4e9857fc7634921f2ad114 | Triage

Sharing

General

Target

9996bc7eca4e9857fc7634921f2ad114
Size

512KB
MD5

9996bc7eca4e9857fc7634921f2ad114
SHA1

65cb888a376988e791787ba1d26a1106b904f2d3
SHA256

b4057bf35e38d9754f8ca6178353ea91775c6218d76eefbbd9c8c4475cff2f98
SHA512

19ddc56060a6aecbefb30ff2decc96c7eaf514da0280cec05db3f2e2dcc44d80671c78b8cdda6481d74f866b0d399ed68efe77dfbc41dc5c685f94087d9164ee
SSDEEP

6144:GDmqfUahcpqGvMcrSQxZr2ITbktSJ+Yishyc4WZnHDRFTPmkmXfXQT34G:ifLcpqG0HQeKZsz+ZnHlN+bAH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9996bc7eca4e9857fc7634921f2ad114

Files

9996bc7eca4e9857fc7634921f2ad114
.dll windows:4 windows x86 arch:x86

7de294fa7b35016fd6cb072bb0905be8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

strcpy
free
_initterm
rand
_snprintf
malloc
strtol
memset
calloc
_adjust_fdiv
strlen

kernel32

ExitProcess
CloseHandle
ExitThread
GetModuleHandleA
GetProcAddress
LoadLibraryA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ