fc92f23b1ff02bf323ccf3a1b8a8dd080bc67e8db071143f221482d2c6d6b217 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc92f23b1ff02bf323ccf3a1b8a8dd080bc67e8db071143f221482d2c6d6b217
Size

184KB
MD5

e3534326f8ec2d47115056ac289f2fba
SHA1

da7e5532b9081b26de5f24d300a95573ab95e3aa
SHA256

fc92f23b1ff02bf323ccf3a1b8a8dd080bc67e8db071143f221482d2c6d6b217
SHA512

3e427c89b49866fa6c17582c0ae1cdaeea360f220e9ff135c816307bb7fbeec711cb206f25c208bb1b4b837b06783df360852273426fd814c21aadcd7fb150b4
SSDEEP

3072:1/nGuicNAbT/zawOS4lFfoDEaUJJGgKfLxytKddJc9v9V9HVZyLnWfPlvvdN0:7WbT/z5v4lFfoDElxDKqt7yLnWfNXdN0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc92f23b1ff02bf323ccf3a1b8a8dd080bc67e8db071143f221482d2c6d6b217

Files

fc92f23b1ff02bf323ccf3a1b8a8dd080bc67e8db071143f221482d2c6d6b217
.dll windows:4 windows x86 arch:x86

e02996d63c07ebca23bb36b4d3829a43

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

free
??3@YAXPAX@Z
??2@YAPAXI@Z
_initterm
malloc
_adjust_fdiv

kernel32

DisableThreadLibraryCalls

Exports

Exports

createI
getVersion

Sections

.text
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 369B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ