d5a2cec060779e55c01a5ac1fdc6b578 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5a2cec060779e55c01a5ac1fdc6b578
Size

18KB
MD5

d5a2cec060779e55c01a5ac1fdc6b578
SHA1

a345c4395e895789cda8570e7d9e45f2672421a9
SHA256

cfe2345fe388419862961739b3559d48a50448a13454a0b08b0ffc3c4f0e63a1
SHA512

07ce59ef9626b4cdd94b89fa1aacc22e0172767c459dea6b87878f859ebc91a36092bb1124fe86d5c4f8d9fdb608bddf81ccdea2dc77c06f09f4c1fcb7278593
SSDEEP

384:Pz/ua+D98JCLElWjbvd1aZDjbKdKm7K0Z:PjH6LVbQf2bZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5a2cec060779e55c01a5ac1fdc6b578

Files

d5a2cec060779e55c01a5ac1fdc6b578
.dll .js windows:4 windows x86 arch:x86 polyglot

4a5c7016f8a55183eaacea531147a4be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA

Exports

Exports

DllInstall

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ