da4d90610745de30ef14444d31574c8c

General

Target

da4d90610745de30ef14444d31574c8c
Size

40KB
MD5

da4d90610745de30ef14444d31574c8c
SHA1

49863092aa225aed416dadc62611d04281f7414f
SHA256

4eb1f619b763059b85c5ecdc8aafa73e92758803bac46c8ebb3b7052a97cb56d
SHA512

e6c4489157f7e4bd83711e6757e743ea6bfaf41aa19e02ee3af4d3040b02aab00e300da348dd574f87f654a925a897e972b9719664eaf288d931f3a9053d3dba
SSDEEP

768:8dcUkL5W5N4t2EfMC+avHy69/kYZauF2IJR1Qj:OcK/4t2EfMC+WSsrJHQj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da4d90610745de30ef14444d31574c8c

Files

da4d90610745de30ef14444d31574c8c
.dll windows:4 windows x86 arch:x86

0b5df2f397dee9fc52e42af2cb066b14

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

ShellExecuteA

kernel32

LeaveCriticalSection
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsFree
SetLastError
TlsGetValue
GetLastError
TlsAlloc
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
VirtualAlloc
HeapReAlloc
LoadLibraryA
FreeLibrary
InitializeCriticalSection
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery

Exports

Exports

execute

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b5df2f397dee9fc52e42af2cb066b14

Headers

File Characteristics

Imports

shell32

kernel32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB