4cc376548ac32f84b6bdd3a7a86609486d8de3a870afc0e55e72ec7afd3aca08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cc376548ac32f84b6bdd3a7a86609486d8de3a870afc0e55e72ec7afd3aca08
Size

2.2MB
MD5

5af981061c01eae4a863154557c6bf21
SHA1

1a43a5625678e3e799b8775d242f187e4704967a
SHA256

4cc376548ac32f84b6bdd3a7a86609486d8de3a870afc0e55e72ec7afd3aca08
SHA512

25188b76b9330f5180afa44ed8ee3bf5316624628252210c9ed39e02bc20aa784f65235eb1f5cfcdf013f383574fa082dccd6f6f781e3dc837c823fb07893af6
SSDEEP

49152:TERAYMrQZF5Sc8v42aqh4O3uxnBVJxjQ4MIrWhxa5:YRNM8ZF5cvjj4LbJxErIJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cc376548ac32f84b6bdd3a7a86609486d8de3a870afc0e55e72ec7afd3aca08

Files

4cc376548ac32f84b6bdd3a7a86609486d8de3a870afc0e55e72ec7afd3aca08
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

OPENSSL_Applink
rtool

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 262KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 699KB - Virtual size: 699KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ