b6bbf39299ae360c052e1f347ccdbea5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6bbf39299ae360c052e1f347ccdbea5
Size

44KB
MD5

b6bbf39299ae360c052e1f347ccdbea5
SHA1

08a793292f2fa1a0f6e418e91612e80f09876cc9
SHA256

38f90c8a812b5afbbe69ac49a4406a515e85a992b3b46f73904084b7a1cca92e
SHA512

ab4582c817300ec950e0a74f46c3c1def8844c0ba4ff31acd6109bc0fc1a80ea891f4a2593f042fd5feb457dc67226b5141c8434fdf761fc9ce4650f7ef3fdbf
SSDEEP

768:Gxkr4PPi/7Fc25We54jWWF6SGoQD56HM6w5rNh9qAwBupm7Tk:Gxkr4Spc24e54j6RjD5Z64rr9kOm7Tk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6bbf39299ae360c052e1f347ccdbea5

Files

b6bbf39299ae360c052e1f347ccdbea5
.dll windows:4 windows x86 arch:x86

34c87f3dd75e63e389dc8f45758827cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA

advapi32

RegCloseKey

gdi32

DeleteDC

ole32

CoInitialize

oleaut32

VariantClear

rasapi32

RasEnumEntriesA

shlwapi

StrChrA

user32

GetFocus

wininet

InternetQueryOptionA

wsock32

send

Exports

Exports

Init
InitA
InitW
Logon
ss

Sections

.text
Size: 41KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE