c57e380b68dbd4119868c2bb82e41959 | Triage

Sharing

General

Target

c57e380b68dbd4119868c2bb82e41959
Size

318KB
MD5

c57e380b68dbd4119868c2bb82e41959
SHA1

5a59af356c4248ba36b34ef3ed6617a4513577cb
SHA256

b0dbbb1998e7f1a6817a964d86ca9de2b2b60ac09cd1f31be9e3b95c801d8fe1
SHA512

0150379354bb4cdd0e32f85ec36f1caa045d1a6b7c47095f14ff104e4df73f88592e086fbd68a47de75d29f25e359f647c8fc86f11cea9d2276699cb67682bcb
SSDEEP

6144:HRjpDvikUfaD9swnqXJ48k6f0XxS/tgCBYqd79OShBqs:J1in+aYqXJ48k6fcmTBYqd79PhBq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c57e380b68dbd4119868c2bb82e41959

Files

c57e380b68dbd4119868c2bb82e41959
.dll windows:5 windows x86 arch:x86

f726bd7f1f33fe7f5b219a2a5b49f3c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
CreateNamedPipeA
GetProcAddress

Exports

Exports

lnxschzbwglaxbx
mgenqbtrwlgbtn
wpkzayrdmw

Sections

.text
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ