c6ce1bdf2722513106cf0cef6306478f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6ce1bdf2722513106cf0cef6306478f
Size

7KB
MD5

c6ce1bdf2722513106cf0cef6306478f
SHA1

aab50f45daf85d12326912e33adc73e569fc8eff
SHA256

cfe2d8a7f2b6e11d8af0289d79a3ad4273403b09c9d522ce8fa4111e5d1bc3c7
SHA512

6f73c5071d46c113113365400ccf0d44eff63f1c27d6ad2b342ce466d306ce4c7e1fa656ed2191ec690ba5dd7719f03be355d07fd6548071beeef85469433a08
SSDEEP

192:gWxCBVRsTDeCsYPtVj4ntAy/gKVQevY8+dV06XKKFl9NKF0:1YyDeWKKfdVFKEfNs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6ce1bdf2722513106cf0cef6306478f

Files

c6ce1bdf2722513106cf0cef6306478f
.dll windows:4 windows x86 arch:x86

3209b059990467a72791766e33ed713c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
lstrlenA
CloseHandle
SetFileTime
CreateEventA
HeapAlloc
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
HeapFree
GlobalAlloc
GetLastError
lstrcpynA

user32

wsprintfA
CharLowerBuffA

advapi32

RegCloseKey
RegOpenKeyA
RegEnumValueA

wininet

FindCloseUrlCache
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
InternetCrackUrlA

Exports

Exports

CheckIEHistory
GetVerID

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ