9acddb4a53dcd5269679933cc3427cda | Triage

Sharing

General

Target

9acddb4a53dcd5269679933cc3427cda
Size

17KB
MD5

9acddb4a53dcd5269679933cc3427cda
SHA1

62eb059ee4ec02bd74f2add9d8d214c3a51c861d
SHA256

4aa77f9087fdd1e0e6c14368e5dba63b4604729d62c66a659a6e090e85b5da74
SHA512

298bbddc220358c1137af5b0fdd37165b513e021ce05db9c8b852019280ebd6b26fee3dae60b85459c5cfd7de64eeab2bdfa296e343be9fce2c9c6b493beae9f
SSDEEP

384:AJUo/w/F0YzWsrWzM8PkTGKX8WIbxzMQsi34:wU3/WYSs8WGKs5RMQsi34

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9acddb4a53dcd5269679933cc3427cda

Files

9acddb4a53dcd5269679933cc3427cda
.dll windows:4 windows x86 arch:x86

8cfb5639a044d231d1b5be8bc2f596cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
FindNextFileA
FindFirstFileA
FindClose
IsBadReadPtr
VirtualFree
VirtualAlloc
GetProcessHeap
GetCommandLineA

user32

wsprintfA
MessageBoxA

Exports

Exports

Init
MY_DLL_MAIN
TjScan

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 518B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 555B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 372B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

P4kcz
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mMTU3
Size: 98B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE