e220772560114466ef4390d95239c416 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e220772560114466ef4390d95239c416
Size

89KB
MD5

e220772560114466ef4390d95239c416
SHA1

a52dbb4167b208de32da47e741573f2eda3ecb98
SHA256

6c91f86d62511700312b7f973f0a9e0ded64082b33dbbc1c406438748cb95761
SHA512

dda3890f19fbdef9df3040620a688b897de1869626e5c49cc55b171fd24bdf7adc83fec96b66e02464f1bb6f6b550894c1f4a0f2e2ab122cf11dce7298318c43
SSDEEP

1536:c6hQl2YJRrg61lbqK6FaUZyWJ5KjqQxZwiHc5:c6+lpJRrg61FqHFa4JyqQxw5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e220772560114466ef4390d95239c416

Files

e220772560114466ef4390d95239c416
.dll windows:4 windows x86 arch:x86

dd949f9c2ea8d8f2d9dbd7c28c3ed8dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr80

_onexit
_lock
_crt_debugger_hook
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_except_handler4_common
_encode_pointer

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ