1d858c704c80547c9f6c4fce4973c78a99b80df874ddd85ccb2a8ed944cfdd35 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d858c704c80547c9f6c4fce4973c78a99b80df874ddd85ccb2a8ed944cfdd35
Size

9KB
MD5

12b64fc885742e4562297e8596d74e1a
SHA1

b56fe00e935fd9b81bef06da3716a742f12cc4d7
SHA256

1d858c704c80547c9f6c4fce4973c78a99b80df874ddd85ccb2a8ed944cfdd35
SHA512

4d8af02d27790780323042dee239f7c02e2bd60a8fb3c3614f97d18888b9cd430868e01c321b1399499155ecf62ae044c2cf424fd11a9454871214da6c47bfab
SSDEEP

192:2jLNNpwUetsU5pOfnldMl6/IwEiVMGH6V0ic499O:gFwUm5enlj/IyGGaVJco9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d858c704c80547c9f6c4fce4973c78a99b80df874ddd85ccb2a8ed944cfdd35

Files

1d858c704c80547c9f6c4fce4973c78a99b80df874ddd85ccb2a8ed944cfdd35
.dll windows:5 windows x86 arch:x86

bab287abd34888be50035187199a1350

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
Sleep
ReadFile
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetTempPathA
CreateThread

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ