b1988ce789a28554ad3ac703119f3e4f97ea35392a57a81182457eff0ef47068 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1988ce789a28554ad3ac703119f3e4f97ea35392a57a81182457eff0ef47068
Size

53KB
MD5

a8d9fc6f62f36ae866eebe064c0f6731
SHA1

7c322453403196c1a62225cd5df13205df6c4336
SHA256

b1988ce789a28554ad3ac703119f3e4f97ea35392a57a81182457eff0ef47068
SHA512

53580388f1ec4a8c5c10d26efb5a0d83a012ebf8a637d19b641a4db9db55d76f854d057d774d5f3125e0e76e595957934ea51e1e4ff4ba3465a0e8499b131cee
SSDEEP

1536:fOx2XTfr1KpIJWuXcfK15tf2eBWiB5EX2fJla/YAC//9uog:pUyuIPa/YAeu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1988ce789a28554ad3ac703119f3e4f97ea35392a57a81182457eff0ef47068

Files

b1988ce789a28554ad3ac703119f3e4f97ea35392a57a81182457eff0ef47068
.dll windows:6 windows x86 arch:x86

110b520b9d9877680892966bf98defbe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

sprintf
rand
srand
free
strlen
time
calloc
memcmp
realloc
memset
malloc
memcpy

advapi32

CryptGenRandom
CryptAcquireContextA

Exports

Exports

GenerateLicense

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ