57116d04a4e1ecb0c93bfc27e0037bd94c885d5ad4cbaea83838318a32e3235f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57116d04a4e1ecb0c93bfc27e0037bd94c885d5ad4cbaea83838318a32e3235f
Size

181KB
MD5

74f00e7300cd0d1ef471db1aafcce996
SHA1

474d05029df6604885003b8fbcfcaa9530b315d4
SHA256

57116d04a4e1ecb0c93bfc27e0037bd94c885d5ad4cbaea83838318a32e3235f
SHA512

bb5f1d6d5e02bcd86410a54e28f2887b5e2895f851c369fb170d6cf59c5986fa3a4ef9f3dd699efdbf27d0d052f2e7d7d5d7ae8ad06581cab3b321356157a3ca
SSDEEP

3072:mVOVK9crNdChBpaHwHjHDgy5fpjUthLI60ttH8Ra4KvqDUhYJ9f6zfvLsSiB:gq5dkpaHwH7kyzjUCttH8Ra7vNQoznLm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57116d04a4e1ecb0c93bfc27e0037bd94c885d5ad4cbaea83838318a32e3235f

Files

57116d04a4e1ecb0c93bfc27e0037bd94c885d5ad4cbaea83838318a32e3235f
.dll windows:4 windows x86 arch:x86

c59bef6c2a3691b4b6e6254b06590a86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

mfc42

ord5356

msvcrt

strcspn

user32

wsprintfA

advapi32

LookupPrivilegeValueA

ws2_32

socket

shlwapi

PathIsDirectoryA

ole32

CoSetProxyBlanket

oleaut32

SafeArrayUnaccessData

msvcp60

?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z

netapi32

Netbios

Exports

Exports

InputFile
PrintFile
WriteErrorLog

Sections

.text
Size: 160KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE