d420d4db618ca066a9b2bb8d54678950 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d420d4db618ca066a9b2bb8d54678950
Size

81KB
MD5

d420d4db618ca066a9b2bb8d54678950
SHA1

3c029938b3e4d866dc31ca390e14c21b85080dfa
SHA256

029f4b3a1c3a4a9d9ec60397108941f184eab246bc218e0666701d2288c9708f
SHA512

b06b2eb3c445d464db856dcf0d4b15dcb94062cabcab1f1fb65ca5745a9ab1997d1e78cddfaedd5963f9a876ceed8fb35748036c5a9036633d8295ef1c12ffaa
SSDEEP

1536:d6V5szFAdiDOu3infsQ4rUu2K7XQVx51OSElCY2ndmt:i5szqdiDOuynfsQ4rU+7XcjcSICVdU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d420d4db618ca066a9b2bb8d54678950

Files

d420d4db618ca066a9b2bb8d54678950
.dll windows:5 windows x86 arch:x86

99ceb450ad9b10f6d2d82ba6b36010b6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
ExitProcess
WriteConsoleOutputAttribute
VirtualProtect
GetModuleHandleA
GetStartupInfoA
GetModuleFileNameA

user32

GetUpdateRect
SetUserObjectSecurity

Exports

Exports

Tausgff
CreateAvgjhss
WriteDfffedcyaun
Tolqkjppp
Fxafnraqg
Mhuaxfm
Gfrxrau
Tkadusbk
Cbhssuybfw
AddSfihhxbf

Sections

.text
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rcode
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata1
Size: 66KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrd
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ