64ab2a1e41b49f5dedd759318bea156d8a36fe28da8b45fb185968ee9fc8c5ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64ab2a1e41b49f5dedd759318bea156d8a36fe28da8b45fb185968ee9fc8c5ed
Size

8KB
MD5

4d3693610d70d205a031088142ecef47
SHA1

b838b3bb3bf3f692748c9ea2df856fa61b35d81f
SHA256

64ab2a1e41b49f5dedd759318bea156d8a36fe28da8b45fb185968ee9fc8c5ed
SHA512

a373f45cad049150338e167f3bf74da33ffdf445bd6c74dd2c89068d82eb130220c2958ad76871692e70a42e7431fb601afe452ec1af5a2959b3423316d9967a
SSDEEP

192:vLHBKpbUD5jKXvR89N6xBU3JNZNvINGUlPp5OY:vsbUFKXySxBUZNZNvING

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64ab2a1e41b49f5dedd759318bea156d8a36fe28da8b45fb185968ee9fc8c5ed

Files

64ab2a1e41b49f5dedd759318bea156d8a36fe28da8b45fb185968ee9fc8c5ed
.dll windows:5 windows x86 arch:x86

bab287abd34888be50035187199a1350

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
Sleep
ReadFile
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetTempPathA
CreateThread

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ