63a218d3fc7c2f7fcadc0f6f907f326cc86eb3f8cf122704597454c34c141cf1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63a218d3fc7c2f7fcadc0f6f907f326cc86eb3f8cf122704597454c34c141cf1
Size

9KB
MD5

1aba36f72685c12e60fb0922b606417c
SHA1

3552c184281abcc14e3b941841b698cfb0ec9f1d
SHA256

63a218d3fc7c2f7fcadc0f6f907f326cc86eb3f8cf122704597454c34c141cf1
SHA512

5bfe0b3cb45856d27963234f2354d71abec425f317e6c40e094cc85c5f6ed9889f5faac13bfa25931f655d808e8e3e91082df95118a2752ca88247aea4c1600a
SSDEEP

96:KNk8ArD7siPcuYq8LkVrd+9iekJPvi5qb330jJWMC47LXdwoPP9G55uBe9/:KKx7ewVQzJ1JZBP9GHTh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63a218d3fc7c2f7fcadc0f6f907f326cc86eb3f8cf122704597454c34c141cf1

Files

63a218d3fc7c2f7fcadc0f6f907f326cc86eb3f8cf122704597454c34c141cf1
.dll windows:5 windows x86 arch:x86

60d01115d6baa0f214990c6e19339133

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
GetModuleFileNameW
GetLastError
Sleep
lstrcpyW
DisableThreadLibraryCalls

msvcrt

free
malloc
memset
strstr
wcsstr
memcpy
fclose
fwrite
fseek
_wfopen
strcmp
_initterm
_adjust_fdiv

Exports

Exports

OAService

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ