c79322265d5c83d81de3f6246b74206abe73c48e91b37f8c012a5ededf5153af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c79322265d5c83d81de3f6246b74206abe73c48e91b37f8c012a5ededf5153af
Size

10KB
MD5

c0303abb8e5c09631153cb95858d19ac
SHA1

16dfc40def99b682806d5c9db672aa02a967e76d
SHA256

c79322265d5c83d81de3f6246b74206abe73c48e91b37f8c012a5ededf5153af
SHA512

fb539ead9fe5239ad12af72022e9ac07e41428870fd5c08c6a81a1f05349e65eb291d287cb05f4a24b10c13abffc4416f458fe6a8fda8ddfb60b23761775ab82
SSDEEP

192:iNwrJKIOz6l62bzJ0modNh0yHf7BWJt+6zwjO1waWeiKMwIiG:iurJ7S6l6azYh0xJtWjRa2wI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c79322265d5c83d81de3f6246b74206abe73c48e91b37f8c012a5ededf5153af

Files

c79322265d5c83d81de3f6246b74206abe73c48e91b37f8c012a5ededf5153af
.dll windows:6 windows x86 arch:x86

b27c18730d56d3cf12a773035d19b18c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess

vcruntime140

memcpy
memset
__std_type_info_destroy_list
_except_handler4_common

api-ms-win-crt-heap-l1-1-0

free
calloc

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initterm
_execute_onexit_table
_cexit
_initialize_onexit_table

Exports

Exports

blake2s_copy
blake2s_destroy
blake2s_digest
blake2s_init
blake2s_update
init_BLAKE2s

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ