de58a75e6f404d27a9fe2a43c1b4e2c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de58a75e6f404d27a9fe2a43c1b4e2c0
Size

80KB
MD5

de58a75e6f404d27a9fe2a43c1b4e2c0
SHA1

cec784166cabf4a3eca33f635bd777d3d07caf3e
SHA256

16a13dd9c94189988510fab1742e57b20b2b3dfeb2e848a0de1fc2cc2ec350aa
SHA512

d66f1711275422abfeef9fb09a42c5a9d02b0819694c45ba6cf4417bc917065d2aed44a503319d65f4004b6b1e59c65cb33616bc28f0822953650810acf4c0f3
SSDEEP

1536:yx3WEecLzUl2qVvBIqUSr249J5a10VEdMLjM:C3WnQULvBIqUSr249oddU4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de58a75e6f404d27a9fe2a43c1b4e2c0

Files

de58a75e6f404d27a9fe2a43c1b4e2c0
.dll windows:4 windows x86 arch:x86

935663f89c56437ec6fcebab9d405fd5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
Beep
ExitThread
HeapAlloc
GetProcessHeap
HeapFree
EnumDateFormatsExA
ReplaceFileW

Exports

Exports

nbra

Sections

.code_01
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 418B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ