04f9846572a0b595de3880f7556890307849cb781465ae9b7236f9aa275bfe76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04f9846572a0b595de3880f7556890307849cb781465ae9b7236f9aa275bfe76
Size

68KB
MD5

b7b35e9f4769df36beab0e21be4fd5c6
SHA1

85bb2082858f40266e181805f56d39c307a4eb47
SHA256

04f9846572a0b595de3880f7556890307849cb781465ae9b7236f9aa275bfe76
SHA512

397514434d4e88e1ddb7dc28fd3a1fa8ad6180aec402711d31c36dd72e73562237494bdb4bbd02afe12c3288be684cddc089b9fe4b565137b057710f0e6644e1
SSDEEP

1536:gYvwmK2Oob9YESOCCYIz4JTQNoFobArxcNbp5T9N:DveVa9UyveKo06m7Tv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04f9846572a0b595de3880f7556890307849cb781465ae9b7236f9aa275bfe76

Files

04f9846572a0b595de3880f7556890307849cb781465ae9b7236f9aa275bfe76
.dll windows:4 windows x86 arch:x86

5959c7cbf2d7d913f2d8909d7846b7a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TlsFree
lstrlenA
SleepEx
ExitThread
ExitProcess

advapi32

RegOpenKeyExA

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ