de9fde9382753a204d3fd547af60a0ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de9fde9382753a204d3fd547af60a0ff
Size

31KB
MD5

de9fde9382753a204d3fd547af60a0ff
SHA1

a1cf8e6aaeb24e16004505d97c35d4437fbbde5d
SHA256

2162bedc568e0018354730431ab61ed558f10fafefd337648a51dd5d91d23756
SHA512

3ddeba4585bbafd84a47d5effc473a835cedac5cad8f0ef36b4791db877922ea0ce7d8d4644079b559adda65e14e260226f302e3659d9ad7238fcc1e29a5dd9c
SSDEEP

384:Owky0MUTOV4uHQKk93nzC45TA9Qu8Fo8/5cOtERg:dF+uHQKkZz35TkQ3hBtE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de9fde9382753a204d3fd547af60a0ff

Files

de9fde9382753a204d3fd547af60a0ff
.dll windows:5 windows x86 arch:x86

c49cb99c679d168e9fb1e6c64d97776c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SendMessageA

Sections

.text
Size: 26KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE