debd1babced74977b748488de0766346 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

debd1babced74977b748488de0766346
Size

76KB
MD5

debd1babced74977b748488de0766346
SHA1

a9fc46a26f1a225e217fa963ab971cd86498caa0
SHA256

fbccaf3ba1cf50477011424fe06f698bded483eb28c75b7eb155e04c2bd432a6
SHA512

d7297b8b84c517263492f90f31f147de92f841e8eaaecb2bd2edfff563307a135ec4b12733ac9c979e99c30e42cf57e08cfb2228d2eb8eeafe739f19d1c58d30
SSDEEP

1536:yC/4+WkB0mVLqG9HG4o/2Gcg2IR9eyxs8JSR:E3i0mVb9m4oz2Dis2SR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
debd1babced74977b748488de0766346

Files

debd1babced74977b748488de0766346
.dll windows:4 windows x86 arch:x86

935663f89c56437ec6fcebab9d405fd5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
Beep
ExitThread
HeapAlloc
GetProcessHeap
HeapFree
EnumDateFormatsExA
ReplaceFileW

Exports

Exports

aabxaez

Sections

.code_01
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ