de7de7958a89152f6cf8e2294f141161 | Triage

Sharing

General

Target

de7de7958a89152f6cf8e2294f141161
Size

116KB
MD5

de7de7958a89152f6cf8e2294f141161
SHA1

b00e0a3625174e066230d15d9d83814c6f40c167
SHA256

cd4feb2568aa3ff08607d44a6916a639abe60d0002dd2ee911bf946246440997
SHA512

977b843832288d9257ead5a9bd87c2a033376b10a681c8fbe982981295b83c59130789c93e62521e05d6eb4892a213f35b8292ca035a835fa0936814f3613fc7
SSDEEP

3072:plgVLIkyJZjHK0Ci6lwXslOeS7T5WrpUfzySryQ:AVIk+xKQ6lw8sTwNUuIy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de7de7958a89152f6cf8e2294f141161

Files

de7de7958a89152f6cf8e2294f141161
.dll windows:4 windows x86 arch:x86

a69bd354dd9797a6ffb982c9ea2376bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

KeQueryTickCount

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 152KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE