e2a5d1da0a946324b98ce900cf39e25b0487859df512f1d03bab18738aebeb30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2a5d1da0a946324b98ce900cf39e25b0487859df512f1d03bab18738aebeb30
Size

11KB
MD5

7e4e3661e244a890d014433b3942267a
SHA1

283486b029459749fce2968001435560a7da2384
SHA256

e2a5d1da0a946324b98ce900cf39e25b0487859df512f1d03bab18738aebeb30
SHA512

f9a43df87539b0ea4cf6d18759532be0a9cb2bcf93fba081838cda437b972749dd041b14c5a242c08de7f0385bcfe07283619f7e9706e4d3549cdcc00dd61ac7
SSDEEP

96:HJVv/vrPvITTTiIBEPPUN2qI3joQra55lZpAq4ZUorf7VOjTgc9T0fPcSZMC:H/j2OwhI38carWVZ5rpOjTgJPXZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2a5d1da0a946324b98ce900cf39e25b0487859df512f1d03bab18738aebeb30

Files

e2a5d1da0a946324b98ce900cf39e25b0487859df512f1d03bab18738aebeb30
.dll windows:4 windows x86 arch:x86

f54216884a7581089bb0ba90a54cf483

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ucscrt

Comp4_L2ToI64
IncrementComp4
Comp4_L2ToI32
I32ToComp5_L4
GetDLLPtr
IsAllEqual
g_szCurrentModule
CheckVmod
g_dwCurrentLineNumber

msvcrt

_adjust_fdiv
malloc
_initterm
free

Exports

Exports

SBRAPPCK

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ