b4da2bb7a21c8d8d3dffe2cb8903ef99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4da2bb7a21c8d8d3dffe2cb8903ef99
Size

178KB
MD5

b4da2bb7a21c8d8d3dffe2cb8903ef99
SHA1

49a5887030dc2048fc3e346d74271ca9d96b933f
SHA256

11457fc8ebd170b8d6314b58fe04c473d86a03668acc11a3f70dfb35c80e4da3
SHA512

740c83a391e2ed6c3f9876317ac78ebca525467f8011dc0d5a1429122c6c1ca2b22c794ce3f4e696f4e887318dda46882b098ab07f6ff10b99ac7d27a355bba6
SSDEEP

3072:qQcj30hJ9KE30B14qH1hYjaY2sdBBvDzk79s36tphGBDT:ij3O0B14wc2sd7rzkS+iDT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4da2bb7a21c8d8d3dffe2cb8903ef99

Files

b4da2bb7a21c8d8d3dffe2cb8903ef99
.dll windows:4 windows x86 arch:x86

529eec90942b849c7b88958663d3d3ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
SetLastError

Exports

Exports

NSGetModule

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ