8db2a4f30c8c827e2c79518bc6d4028774b2055219670f3e5c706dcbf4067a08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8db2a4f30c8c827e2c79518bc6d4028774b2055219670f3e5c706dcbf4067a08
Size

8KB
MD5

e6a375ed1bd56fe20bc8753c4b991888
SHA1

fc0c502de32a860ed91e1c175968f8d68673694e
SHA256

8db2a4f30c8c827e2c79518bc6d4028774b2055219670f3e5c706dcbf4067a08
SHA512

b2db6a4c0b94abec192c67e932cbc877178aeddb15c1f64691313a6b740bb940f866a04d3f7f198ccc00834cf1fab9c0a541cd728c277b2e1fee69bf58c6d6c6
SSDEEP

96:j/uD0DiDH+0SWoVLVNCRzNrELsFM5WJFTcgqmjONs3/dOoGKM8fQ1:jm+0SWo93gzNWs8WJGUjONB7KMES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8db2a4f30c8c827e2c79518bc6d4028774b2055219670f3e5c706dcbf4067a08

Files

8db2a4f30c8c827e2c79518bc6d4028774b2055219670f3e5c706dcbf4067a08
.dll windows:6 windows x86 arch:x86

a3a69723fb856a4cf3989e9ddd30de91

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit

Exports

Exports

have_aes_ni
have_clmul
init_cpuid_c

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ