a0fb7c07bd232343116dea7e2b2fe62d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0fb7c07bd232343116dea7e2b2fe62d
Size

6KB
MD5

a0fb7c07bd232343116dea7e2b2fe62d
SHA1

5346b08cadb681522c21e7952f75b49546f7cb50
SHA256

8cace3cd27aeb19202705743714eb24e7a1af0fccc14a982802c6b328abad6ad
SHA512

0761438b078f2208216537d11afbaa94c1a0f4bf09013ea8a6cc54c5bd55bf4eee88d73fb944ab2f8200d7762ddf511ff4e133fde6dba0336374054c1785e737
SSDEEP

96:z/jjopz77KYvKn4Ywflm09eCcWwZ6xWwO:zYpz77KYvXfYHW06xWL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0fb7c07bd232343116dea7e2b2fe62d

Files

a0fb7c07bd232343116dea7e2b2fe62d
.dll windows:4 windows x86 arch:x86

d5a6ca7ab7a89e3b1becd4a697fb51fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
CloseHandle
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
VirtualAlloc
lstrcpyA
lstrlenA
VirtualProtect
GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateThread
ReadFile
GetFileSize
CreateFileA
lstrcatA
GetSystemDirectoryA
GetCurrentProcessId
DeleteFileA
ExpandEnvironmentStringsA

msvcrt

memcpy

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ