a0053d534ee7d7e96e82aa150dfcb888ea01f3a7f248996d91a35d929d2a11f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0053d534ee7d7e96e82aa150dfcb888ea01f3a7f248996d91a35d929d2a11f3
Size

8KB
MD5

a399d4fbb86e5b58873f1166492c413e
SHA1

426035b2f79a439f73b86301a605b6b559e0c3eb
SHA256

a0053d534ee7d7e96e82aa150dfcb888ea01f3a7f248996d91a35d929d2a11f3
SHA512

92b73a219f88c613c855cce03f1bc0d82a52dc915919b54e92a1f774a065f5b90133a8618da5a33f5b84b1278fe386fbcd5a8afb322c9c52a638388830b6fe19
SSDEEP

48:aDQ1qEqevmVglLXkPbIVwhMXrDhMveiJMwKMRuqSOB:ZqevmVGgPkVwyDQeiJMwKsxr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0053d534ee7d7e96e82aa150dfcb888ea01f3a7f248996d91a35d929d2a11f3

Files

a0053d534ee7d7e96e82aa150dfcb888ea01f3a7f248996d91a35d929d2a11f3
.dll windows:6 windows x86 arch:x86

514c6c98ada0bc59a07c38ac0cfc03ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

fwpuclnt

FwpmFilterEnum0
FwpmFilterDestroyEnumHandle0
FwpmFilterCreateEnumHandle0
FwpmEngineClose0
FwpmFreeMemory0
FwpmFilterDeleteById0
FwpmEngineOpen0

kernel32

GetModuleHandleA
DisableThreadLibraryCalls
GetProcAddress
VirtualProtect

Sections

.text
Size: 1024B - Virtual size: 590B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ