c1e60cd785ad6491e4c342bdecd5a6b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1e60cd785ad6491e4c342bdecd5a6b0
Size

42KB
MD5

c1e60cd785ad6491e4c342bdecd5a6b0
SHA1

17ca2c58c277893a8ebf3b5494b2a7b86947c137
SHA256

bcecadf9d7a4af8d2271724dd377cd4889efca802c88c04570c1c01fce8b065a
SHA512

acec89088762653357398882593eacd02a013b3e69a9f9459a4a6f5f8d84f60825934424f4c4c03fe657081b452f0ab2af02e775a3665d311aaa1e43167344ab
SSDEEP

768:8cKO09A16eKSpLq15a4xqC333JoQIVjJebAfPo5e7rb5PyBL1o9gAia:OOsA1XK8qu4tH3S59e8OSrbgboeAi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1e60cd785ad6491e4c342bdecd5a6b0

Files

c1e60cd785ad6491e4c342bdecd5a6b0
.dll windows:4 windows x86 arch:x86

de91df502054d2e0812d8bd5f4505923

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
CloseHandle
GetTickCount
GetStdHandle
QueryPerformanceCounter
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ