d1e14b5f02fb020db4e215cb5c3abc6a7b1589443bccd6f03b77ee124ca72b5c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1e14b5f02fb020db4e215cb5c3abc6a7b1589443bccd6f03b77ee124ca72b5c
Size

11KB
MD5

ddf2e657a89ae38f634c4a271345808b
SHA1

b73763c98523e544c0ce0da7db7142f1e039c0a2
SHA256

d1e14b5f02fb020db4e215cb5c3abc6a7b1589443bccd6f03b77ee124ca72b5c
SHA512

bcb74e033f063b9f118a7b8ae9d2d2a7bbd71cb3ae888c3f9b48c13ce43616e1267e358ba14133d4159be20ca6b49c891e3fedab5b0efc434b5da32bb604f7b7
SSDEEP

48:ZAatawIfaYY7bpxIOrH1bT8yOAE0ofmNnlJC79IMi1XT3wCNP:Z5Mw+0HpxIORbVOAWmbJGMXTgC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1e14b5f02fb020db4e215cb5c3abc6a7b1589443bccd6f03b77ee124ca72b5c

Files

d1e14b5f02fb020db4e215cb5c3abc6a7b1589443bccd6f03b77ee124ca72b5c
.dll windows:1 windows x86 arch:x86

cf2733f40585945e7354a1141b1a049d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualAllocEx
VirtualAlloc
VirtualFree

Exports

Exports

ClearMyTracksByProcess

Sections

AUTO
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ