df34d6084f97b25a17f5e05d663d4c9bb3fa9f8aac3e99c1d30f5173d6d50fd6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df34d6084f97b25a17f5e05d663d4c9bb3fa9f8aac3e99c1d30f5173d6d50fd6
Size

524KB
MD5

751c5e3103f80fb5d2e4a95a6940996a
SHA1

73d0a84c59d9b4d848aa1ca333b8879394df5961
SHA256

df34d6084f97b25a17f5e05d663d4c9bb3fa9f8aac3e99c1d30f5173d6d50fd6
SHA512

9f2f3ced71484a10e34f306feccc294a3f900219c66975b260be442ae704e08b2584e6bcefcacc3dd20b1f627dc8e2b98b69a6143382fb3a67098b7c40f26492
SSDEEP

12288:7+4IFhG5cfgO32CL9KUTXe/UKhpogYTSTgVmVg8uyudN:bqvbKUTO/UNZqVg8u1L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df34d6084f97b25a17f5e05d663d4c9bb3fa9f8aac3e99c1d30f5173d6d50fd6

Files

df34d6084f97b25a17f5e05d663d4c9bb3fa9f8aac3e99c1d30f5173d6d50fd6
.dll windows:5 windows x86 arch:x86

9255cc3bc9a978f5d5ad7b48c755abee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileMappingA
CreateFileA
lstrlenA
GetSystemDirectoryA
UnmapViewOfFile
MapViewOfFile
SizeofResource
LockResource
LoadResource
FindResourceW
FreeResource
VirtualAlloc

imagehlp

ImageNtHeader

Exports

Exports

DllMain
GetEncSChannel

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 511KB - Virtual size: 512KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ