d67233286e846578b6257a0beb58ce3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d67233286e846578b6257a0beb58ce3c
Size

6KB
MD5

d67233286e846578b6257a0beb58ce3c
SHA1

a2097b32da5e46018b6bc98795e1958d7688949d
SHA256

e3dc2cc7c51c7bb79a7a0e1a06699214503dc4263e520eb76f19e8999ab6aafb
SHA512

b353e40296b211d279e0520de28602c8191c9cbd8f61716dd9ea6b0c8f535e9e43a9e35b5ff45a6c7176c5e78d40f5a1286de2fca9ee08d5b9c3e1680acd8ac7
SSDEEP

48:6jiCygAIfxwgWcXJbwRvrzda3+f4B9C5TwRWJus5YEulXQ2LplUTqJhf4:aAI+gWgbwRTzO84LETI0us5Y42F+2J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d67233286e846578b6257a0beb58ce3c

Files

d67233286e846578b6257a0beb58ce3c
.dll windows:1 windows x86 arch:x86

afecb02318ba6939ad35199c70b52144

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetEnvironmentStringsA
RtlUnwind
RtlZeroMemory

user32

MessageBoxA
wsprintfA

crtdll

_fdopen
_open_osfhandle
fclose
_cexit
malloc
memcpy
printf
raise
setbuf
strcpy

Exports

Exports

PexAboutPlugIn
PexPreloadImage
PexRegisterPlugIn

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ