c85799f315fc0fb89fb90fb33d9f2761 | Triage

Sharing

General

Target

c85799f315fc0fb89fb90fb33d9f2761
Size

17KB
MD5

c85799f315fc0fb89fb90fb33d9f2761
SHA1

12e05a889e1dae9aea9aaf304aa44a22cad5c79a
SHA256

e807de5f9eeedece226f3a6481bea6da0253513f38c9b4ef418b9e8ae6274748
SHA512

e7450bc5a39f713a41237d4f9151d4019d7253e8fc941e8656441d07e935d87d12ba55175fd967811f3f1c31d3531511a81a4ae27ab7c2d4bbffbffeccf0c78b
SSDEEP

384:6Uo/w/F0YzWsrWzM8PkTGKX8WIbxzMQsi34:6U3/WYSs8WGKs5RMQsi34

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c85799f315fc0fb89fb90fb33d9f2761

Files

c85799f315fc0fb89fb90fb33d9f2761
.dll windows:4 windows x86 arch:x86

8cfb5639a044d231d1b5be8bc2f596cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
FindNextFileA
FindFirstFileA
FindClose
IsBadReadPtr
VirtualFree
VirtualAlloc
GetProcessHeap
GetCommandLineA

user32

wsprintfA
MessageBoxA

Exports

Exports

Init
MY_DLL_MAIN
TjScan

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 518B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 555B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 372B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

P4kcz
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mMTU3
Size: 98B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE