abd174efa6ac471c802461a395d2ff94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abd174efa6ac471c802461a395d2ff94
Size

7KB
MD5

abd174efa6ac471c802461a395d2ff94
SHA1

504b9cbe03af9901d19ce74b897fcb6bd4f7a715
SHA256

bc0b5265d5bcd96573e09ed8776159ada6b5c3a565b04f5f08114f2ac9ee575d
SHA512

6b0e098c5a855c201a2bf5b01e2d67e5193d076f9e114223adc5e9c99196cb0a3a1ec6272155eb0c408fd0495efa1923315ea15a3cc7ee501bf1ac41d18a5814
SSDEEP

48:CMiin+awL5br0QrhfpszlLvxPX/N+bNfxUiXydMkitWHdAsanjd+B0aCAJCaKDPI:AFnr3gvn+ZEMNW9zap+KaSfdnb+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abd174efa6ac471c802461a395d2ff94

Files

abd174efa6ac471c802461a395d2ff94
.dll windows:4 windows x86 arch:x86

fd10dfcfb993971e23aa4dc402ed22a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
_adjust_fdiv
_initterm
sprintf
fclose
free
_stat
fopen
fseek
fread
strtok

kernel32

lstrlenA
GetSystemDirectoryA
CreateProcessA
DeleteFileA
Sleep
ExitProcess
GetModuleFileNameA
CreateFileA
WriteFile
GetFileSize
WinExec
CreateThread
CloseHandle

user32

wsprintfA

urlmon

URLDownloadToFileA

wininet

HttpQueryInfoA
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetGetConnectedState

winmm

timeGetTime

Exports

Exports

_DllMain@12

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 274B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ