d73585a5de15e67eb963a8b1f037a5c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d73585a5de15e67eb963a8b1f037a5c9
Size

1.2MB
MD5

d73585a5de15e67eb963a8b1f037a5c9
SHA1

efcafe0b3ab123fe44d9c9de62a24bb8ed2baf11
SHA256

5432fdf95bc2adf41fc2c188f474ebe855827ee4ee010c1391a477eca2aeaed3
SHA512

4ca706a996e7ef4817adcb9ef2e9d384212490f725a59df6d5ece67319d55aa6d7d824cfaa14433168a0826d949295032e38343203c610ca6be7acea46de0591
SSDEEP

12288:WZ1f1Ooj+MINow4vs0fv7fgnKln0DpcCyAYyY1zTpIVbxLRRgPU0bOk/MfQYS:WZNsU2Sw4vsDm5CyIY1zObxF+f+E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d73585a5de15e67eb963a8b1f037a5c9

Files

d73585a5de15e67eb963a8b1f037a5c9
.dll windows:4 windows x86 arch:x86

0cafa218bea0d71fe4e3b48a3d00967f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
Beep
HeapAlloc
GetProcessHeap
HeapFree
EnumCalendarInfoExA
GetDevicePowerState
SetEndOfFile
CreateFileA

Exports

Exports

sugkng

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ