d58c848a597ff9ce60557f0825bbceb6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d58c848a597ff9ce60557f0825bbceb6
Size

38KB
MD5

d58c848a597ff9ce60557f0825bbceb6
SHA1

f7cba3ea7b9a748cef663696ff9167d85de945ca
SHA256

578f42e518ea6a10944502b86a75e26c7e49f36ae36b778f6238f00c94aae550
SHA512

9509bfb24cbc554dd91ac92d600219a9878a90555df40feef09e5a12f1561f0142cc55d842a959142a8800a8983fa9afd32ee55196029cdb9cbd8f3d1af3bd84
SSDEEP

768:yuR04MMlKV6kAYu9mZllNl1H2cr8hssyNMYh32s2OM:yutwkou9MlNlJ2cr8qsxg9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d58c848a597ff9ce60557f0825bbceb6

Files

d58c848a597ff9ce60557f0825bbceb6
.dll windows:4 windows x86 arch:x86

1ae9789d3e19799e2cc3b9e645774999

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetPrivateProfileStringA
RtlUnwind
DebugBreak
GetEnvironmentStringsA
VDMOperationStarted
SetProcessShutdownParameters
SetConsoleHardwareState
GetCommandLineA
ExitProcess
GetStartupInfoA

Exports

Exports

Qaafxaojfco
ReadWtfgtepe
Wqnosew
Jsbtbdyn

Sections

text
Size: 4KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: 29KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ