d1a8cd521302878869a5d2566f37dde57df23bc3304cf254acd465cdf422a980 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1a8cd521302878869a5d2566f37dde57df23bc3304cf254acd465cdf422a980
Size

1.7MB
MD5

d8b25749ad09de54e979dfc552137ede
SHA1

6957e11a09d46eb08220e749d31b8f7158419762
SHA256

d1a8cd521302878869a5d2566f37dde57df23bc3304cf254acd465cdf422a980
SHA512

064845c4743fdc3a4b3840481d5f63ab64a303639faf398387a8ae63d833a371a89eaf77b04141588d5fd50291d08b6bc23e1f98a8bb333e59de844c7de4e7fe
SSDEEP

24576:fsWqa/FuLbrk6P2Z++lN2Ma8ZzpqtGwq5obA5Tgo73WlK6GitbYrI/YoXkGctdSg:fsWqaIAO2Z+Ia8rdGbtI1tl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1a8cd521302878869a5d2566f37dde57df23bc3304cf254acd465cdf422a980

Files

d1a8cd521302878869a5d2566f37dde57df23bc3304cf254acd465cdf422a980
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

vartobool
vartoby
vartocy
vartodate
vartof
vartoi
vartol
vartostr
zcrxEntryPoint
zcrxGetApiVersion

Sections

.text
Size: 685KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

VProtect
Size: 625KB - Virtual size: 628KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 75KB - Virtual size: 528KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ