f8298d52ffd55c36c9b703f384d19f57eb369d1c9e98f3fb93742aad7273c419 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8298d52ffd55c36c9b703f384d19f57eb369d1c9e98f3fb93742aad7273c419
Size

7KB
MD5

8cc2256df18fe986fc9d9b4cbfac7181
SHA1

3dd10ce46722ed62b36687527fecd6d31f3f4dd8
SHA256

f8298d52ffd55c36c9b703f384d19f57eb369d1c9e98f3fb93742aad7273c419
SHA512

6398b76585b4a308a8b7a4da90403dc2e9ce2efe39b1b937ce1ba45920f54d02284f26e1cc8d13dd68f06b9592904dfd5163c2bc4e05ec35e5dee0e04fe284b3
SSDEEP

48:66ay5YVO3EVkApc2wp8hH1NZn5EquglQ067YbPWVbABbgL3q9J5S2hmc:b3EVkApcX4Hiv0hbP/q3qX5S2hV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8298d52ffd55c36c9b703f384d19f57eb369d1c9e98f3fb93742aad7273c419

Files

f8298d52ffd55c36c9b703f384d19f57eb369d1c9e98f3fb93742aad7273c419
.dll windows:1 windows x86 arch:x86

731b7e280add7ddd2d8bee2511c30cf5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsA
CloseHandle
GetSystemDirectoryA
OpenMutexA
RtlUnwind
WinExec

crtdll

_fdopen
_open_osfhandle
fclose
_cexit
malloc
printf
raise
setbuf
sprintf
srand
strcpy

Exports

Exports

_LibMain@12

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 176B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 712B - Virtual size: 712B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 160B - Virtual size: 160B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 72B - Virtual size: 72B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ