91a6fd39b40dd817a814de6e97bdcc0d16567201ca3650c6421b84be54b87caf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91a6fd39b40dd817a814de6e97bdcc0d16567201ca3650c6421b84be54b87caf
Size

21KB
MD5

13d208e90872306650eaa250d04df277
SHA1

a4ac729ce0c32f538382f2699480e5f805ad5fd6
SHA256

91a6fd39b40dd817a814de6e97bdcc0d16567201ca3650c6421b84be54b87caf
SHA512

a628158d8cc7e2f272a0e3abdb89579194b104c94176122ce16046a935f181b3859a9800b7679e803b46fe8eb5c92bed034a2e47aebf00b086fccd411f9db436
SSDEEP

384:d6jq7YJYDHWq2mNOgxfGx3YJYtZCmAEbwlGZPEXBZb5HjtYJY1Qjxj0K0V5B:4uYJYDHWqtNOgxfGx3YJY/C2UlGZPEXL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91a6fd39b40dd817a814de6e97bdcc0d16567201ca3650c6421b84be54b87caf

Files

91a6fd39b40dd817a814de6e97bdcc0d16567201ca3650c6421b84be54b87caf
.dll windows:4 windows x86 arch:x86

ab0c4352d761e62bd28eb6f3e3a45a55

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

carclw60

_CARC__LibraryMain@12
CARC__ExitInstance
CARC__EnterInstance

carciw60

CARC__PCodeInterpreter

Sections

.text
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RCLID_TE
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 230B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RCLEP_DA
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ