c567d2f5923037c317e83ef43c3b6ad2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c567d2f5923037c317e83ef43c3b6ad2
Size

56KB
MD5

c567d2f5923037c317e83ef43c3b6ad2
SHA1

b4e98df1001d2054b69dfa44f8f3b2e62b5322be
SHA256

0de81a2feeca17867e750051448d0e56a11aabd334e244882a21553b26d243ce
SHA512

73daf2a5bf7ded4232053b0c33507430b7dbbe0d8b87ac9757d30ea6e0837de4643e96565694c072d4f6292ad4d54f174171228537db0832282614b1ac64356a
SSDEEP

768:gZKyFCV+nxMvNoYRYvnurq724vy58MTxyHVXo9bppy8yq:oKICV+4Yk58MTghoPDy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c567d2f5923037c317e83ef43c3b6ad2

Files

c567d2f5923037c317e83ef43c3b6ad2
.dll windows:4 windows x86 arch:x86

bc620fe4873540cf731d36c22c020368

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
VirtualAlloc
lstrcmpiA
GetProcAddress
LoadLibraryA
GetLastError
GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
LCMapStringW
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
RtlUnwind

user32

GetSystemMetrics

Exports

Exports

AlcoTst
satDoc
satGen
satInit
satOnstant
satTion1
satTion2
satleDoc
satrateDoc

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ