a9de57a90c8eba1c63b248c5b8c4d34a | Triage

Sharing

General

Target

a9de57a90c8eba1c63b248c5b8c4d34a
Size

552KB
MD5

a9de57a90c8eba1c63b248c5b8c4d34a
SHA1

8eaf870c962430049a0e9d4a43fced66326e2b60
SHA256

8917e80a9a6f6ba3f7ee8ace4e2eb308b64d26b33162ec1b0fa169d143bbb1bf
SHA512

53e097d184f464c0d6b2c7caf611ef1ceec4cb274127835ad48cc1602eee56bbddcf0d0eec45c71ba10c59ae6b8d8dd213fe1332b2f212e84375174291b96a5c
SSDEEP

12288:CIDVlO13EYNO54nI8Avo+A4NmAu4WUpYG:CmVl4Qr8FAue

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9de57a90c8eba1c63b248c5b8c4d34a

Files

a9de57a90c8eba1c63b248c5b8c4d34a
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ChangeNumRead
DoFunction
HookProc
InstallHook
OpenForm
RecPack
SwSend
UnHook

Sections

.nsp0
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE