cf9188ec4341a6beedad4a4026b96453 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf9188ec4341a6beedad4a4026b96453
Size

10KB
MD5

cf9188ec4341a6beedad4a4026b96453
SHA1

81bb4680b579b9549f8c4f43a0bf938386af58bd
SHA256

1163c2417b7fef804513bf69593207b889c5f00f3cc13cc75482f932d8dbac4a
SHA512

3b847bd560f0519cf62cc1eac1bf4af3e836618d93db50b5729dec3b3f6ef86b7bf4374201040bcc2352141121ffe38242154ae09801dcb5f30243005e589805
SSDEEP

96:8k4jA0kwYDk11ld+T1DvMWQD5Fbu7K3XA+pVAAD6CcC7tCE4H7:jDTXCd0RvpQ1FR3XfVlD6ig

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf9188ec4341a6beedad4a4026b96453

Files

cf9188ec4341a6beedad4a4026b96453
.dll windows:5 windows x86 arch:x86

6245e85efcae34707b093628f35cc97a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\build\httpd-2.4.10\srclib\apr-iconv\Release\iconv\iso-8859-7.pdb

Imports

libapriconv-1

apr_iconv_mod_noevent

msvcr90

_lock
__dllonexit
_except_handler4_common
_crt_debugger_hook
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
_onexit

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter

Exports

Exports

iconv_module

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ