174e52eb534a2f172a2aa62a9746530bb831c4ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

174e52eb534a2f172a2aa62a9746530bb831c4ec
Size

133KB
MD5

1dd5112839c780a7143fb06cd12b5d99
SHA1

174e52eb534a2f172a2aa62a9746530bb831c4ec
SHA256

ea7ab4867fbd44a926b3d9f52fd4afc1e5d060563a1b8e211f124d5c78d9eae6
SHA512

aad4b98504ec2092f0edce10fbbd371ef904d7b9219f05c4fb02181c1294adf0f17e125284f0a8a6e77e70b63592f3ba31413ebf3507e5b62c7cfa9c603f50ed
SSDEEP

1536:iSTfHBtfpogcDzBnWJ3rju5HoJF6OnyuTlS7InWJfwmkOULbplAidH8TcM:x/8BnE/BJpnX5TmJ+LdcTp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
174e52eb534a2f172a2aa62a9746530bb831c4ec

Files

174e52eb534a2f172a2aa62a9746530bb831c4ec
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

hpowiwsfTUP

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ