91bb37f4a13e596631b05731b016cb442d76f38111219a32c5b5f649bca52fd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91bb37f4a13e596631b05731b016cb442d76f38111219a32c5b5f649bca52fd7
Size

7KB
MD5

78b58ec63e1cb70d49fe2c69e1230b67
SHA1

102fffeedf0486b2e1a494b03a18cb6d30980799
SHA256

91bb37f4a13e596631b05731b016cb442d76f38111219a32c5b5f649bca52fd7
SHA512

d42f3814d1f41a9dfbfb577937657579f3ac076955d9602698062eff0857262354f15f9c212fd71711f30196d0a951159f64870e64b68cf3db816d6cf03ec8c4
SSDEEP

96:wb4VHccYJUC/aFbz/j0OvaPud3cX5aXW:wUaJf/aFbP0Ol2JaX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91bb37f4a13e596631b05731b016cb442d76f38111219a32c5b5f649bca52fd7

Files

91bb37f4a13e596631b05731b016cb442d76f38111219a32c5b5f649bca52fd7
.dll windows:1 windows x86 arch:x86

f226b826cd84e9d22f32db364ed41df6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetCurrentThreadId
GetEnvironmentStringsA
CloseHandle
GetSystemDirectoryA
GetTickCount
OpenMutexA
RtlUnwind
WinExec

crtdll

_fdopen
_open_osfhandle
fclose
_cexit
malloc
printf
raise
setbuf
srand
strcat
strcpy

Exports

Exports

_LibMain@12

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 168B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 704B - Virtual size: 704B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 160B - Virtual size: 160B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 72B - Virtual size: 72B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ