tmpeue7w2ek | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmpeue7w2ek
Size

872KB
MD5

d7cbbedfad7ad68e12bf6ffcc01c3080
SHA1

a21c860b81ed158e91b2b921b752f48fda6d6f1e
SHA256

aa9ec502e20b927d236e19036b40a5da5ddd4ae030553a6608f821becd646efb
SHA512

739a2913f882b712a4d20f831530a411081644704b9ae234f4623b4fb2400f6a36486454f6a25dc8676ef5c570d3e23698b9a35bb3c2712ddb7e050661f36924
SSDEEP

24576:hamf2FfWl8KuqGavkg3NyNIbbbIoIBAUZLY:hx+s8KuqGaX0ToIBAUZLY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmpeue7w2ek

Files

tmpeue7w2ek
.dll windows:4 windows x86 arch:x86

e7aa0aeef61e4ca89f4b87b602f40e02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memset
malloc
memcmp
free
qsort
strlen
strcmp
_errno
_initterm
_adjust_fdiv
sprintf
abort
memcpy

kernel32

DisableThreadLibraryCalls
GetACP

Exports

Exports

_libiconv_version
libiconv
libiconv_close
libiconv_open
libiconv_set_relocation_prefix
libiconvctl
libiconvlist
locale_charset

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 800KB - Virtual size: 798KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ