b6f77c0cb147b84fe1c7e197c58fc55b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6f77c0cb147b84fe1c7e197c58fc55b
Size

4KB
MD5

b6f77c0cb147b84fe1c7e197c58fc55b
SHA1

ae8f13df1e88471aae2f23dfec401ac6401c8548
SHA256

483729f1056394b8277d1902294a9599dceaa96ca561f422c7255adc489d0535
SHA512

6f3e3429af47d63e7a1660a36edf8d159cb5ea8f7f923a86dfca62cc7be91a20cd5ec3f78fe26fd6bd0573810d6bd93481581a028070c3fcead4c8db06441bb7
SSDEEP

48:ycoGwUtvGYjBE156503VkQdkKiPTjdJqa:GOtvGYFED3VzdkKiPPdJqa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6f77c0cb147b84fe1c7e197c58fc55b

Files

b6f77c0cb147b84fe1c7e197c58fc55b
.dll windows:4 windows x86 arch:x86

3ff17ad94a82b7dc709f65a7d695939a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetProcAddress
ExpandEnvironmentStringsA
WinExec
lstrcmpiA
DisableThreadLibraryCalls
CreateFileA
LoadLibraryA
CloseHandle

advapi32

RegEnumValueA
RegDeleteValueA
RegOpenKeyA

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 761B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ