2d074d95c96ab30d670dfac69cca03e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d074d95c96ab30d670dfac69cca03e3
Size

76KB
MD5

2d074d95c96ab30d670dfac69cca03e3
SHA1

129681519a7b75acc8df8d7e6f492e9c0cea4106
SHA256

ba3d393c5c3401b696a2a92d281f947f713da3c4c065f8fe3acc44b6f5f9c6dc
SHA512

22d724c73d114bb855f4e3cbbfbdecbe465e582b1d6818b6c04b140f75c3a1f53abdeb38b1a08a95e1bde7d55424824fea734634966ed752206110f2bdeeba66
SSDEEP

1536:0aExfjH3rx1HR3AkeLzsUz2aqx+ZmCE+RXs68eCq:0a6fjZa0k2vqmCLJ8M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d074d95c96ab30d670dfac69cca03e3

Files

2d074d95c96ab30d670dfac69cca03e3
.dll windows:5 windows x86 arch:x86

6245e85efcae34707b093628f35cc97a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\build\httpd-2.4.10\srclib\apr-iconv\Release\iconv\shift_jis.pdb

Imports

libapriconv-1

apr_iconv_mod_noevent

msvcr90

_lock
__dllonexit
_except_handler4_common
_crt_debugger_hook
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
_onexit

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter

Exports

Exports

iconv_module

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 802B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ