c641ecae7c6d2be3e9fcb3176fcb3f29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c641ecae7c6d2be3e9fcb3176fcb3f29
Size

476KB
MD5

c641ecae7c6d2be3e9fcb3176fcb3f29
SHA1

a180e0bfb0fe6b80cf9f78cae91c19533367d0e4
SHA256

754629e9aa9f2ed30a1056276d6e8a2e9d4a550f56a8cd4b906b7686db23d363
SHA512

bbd3eab352cba9f3991ebff6a3beef26a4c20e39a9841641c458c4ca8ac99a021f4803ffec6486bb979cf3d6d94af7d64f5d22078a8ae8b8cdaac96454f766e0
SSDEEP

6144:N1+NvQ8HwceI+carfMHULthFTFNx6z7zEJu0gUqmI4jaSUFuIp2wp0qOTnMAC5ge:N13rzTFNxA7z2Bq4s2/y7IPhPtl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c641ecae7c6d2be3e9fcb3176fcb3f29

Files

c641ecae7c6d2be3e9fcb3176fcb3f29
.dll windows:4 windows x86 arch:x86

a98fbb5a1ab720fd624631907c1a99da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FatalAppExitA
LocalAlloc
TlsGetValue
TlsFree
LocalFree
TlsAlloc
TlsSetValue

msvcrt

exit
free
_initterm
malloc
_adjust_fdiv
floor
ceil
strncmp
sprintf

Exports

Exports

iplBlur
iplCopy
iplCreateImageHeader
iplDeallocateHeader
iplDecimate
iplDecimateBlur
iplRedirectError
iplResize
iplSetBorderMode
iplSetROI
iplWarpPerspective
iplWarpPerspectiveQ
iplYUV2RGB

Sections

.text
Size: 372KB - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ