d6fd42bf20d0e77ff379e972004132f0 | Triage

Sharing

General

Target

d6fd42bf20d0e77ff379e972004132f0
Size

74KB
MD5

d6fd42bf20d0e77ff379e972004132f0
SHA1

3fec1f7e771e95001ede58ca0e1268cc5f7ba14a
SHA256

6e9583e41c52bbfb267e0c49be6201fc20e94d2a308844edac7983ca66235c55
SHA512

fb335a99c9209a31b06be261b498533fb716ec7e2c5f8d5f3d88b581e0546c1b51c7e3656dc3c93edcecc146ee88627fb2094fa1abc2ecb343c28b666a4fd0d6
SSDEEP

1536:cGZ5nvA2HEb2vWhfU6fLPqNW4AUw+MoXkaRcUP1IgpN2p:cGouEGU9+NfA/BgVPCgf2p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6fd42bf20d0e77ff379e972004132f0

Files

d6fd42bf20d0e77ff379e972004132f0
.dll windows:4 windows x86 arch:x86

9beacf7b9baa620d40e94fd52a9262f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualQuery
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetWindowThreadProcessId

winmm

timeGetTime

ws2_32

send

msvcr71

_onexit

Sections

.text
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0
Size: - Virtual size: 758B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ