4609b0b1c77798c11e2a8d02cc5138f31f467d582c6fb41ec41dcd5474582ba2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4609b0b1c77798c11e2a8d02cc5138f31f467d582c6fb41ec41dcd5474582ba2
Size

48KB
MD5

6fa6f9c486aa0292b384ac229a5fa23c
SHA1

016ec769cf77a4216c6b7958e9092be647098024
SHA256

4609b0b1c77798c11e2a8d02cc5138f31f467d582c6fb41ec41dcd5474582ba2
SHA512

2de5b1579d4200ce7622cf022f8d348671be49c2c84dbad9c716bff21eb562ed7a8e8a25cd8191ef79ea74d77682a2d8074994738bade6dc32d6438c75b40dfb
SSDEEP

768:bv/NsSsyVEGEE6IWDfttYLFjXXLHlRhm6PRp9lRqsRwj3e:bns8SttYLFjXXLHCe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4609b0b1c77798c11e2a8d02cc5138f31f467d582c6fb41ec41dcd5474582ba2

Files

4609b0b1c77798c11e2a8d02cc5138f31f467d582c6fb41ec41dcd5474582ba2
.dll windows:4 windows x86 arch:x86

7b04dc4adf59543e58f7000066e4d579

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileAttributesW
MultiByteToWideChar
lstrlenW
WideCharToMultiByte

msvcrt

fflush
fprintf
_iob
??3@YAXPAX@Z
fclose
strncmp
fgets
fopen
strcmp
strlen
atoi
malloc
??2@YAPAXI@Z
memchr
strcpy
strchr
calloc
_strdup
strstr
abs
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
free
memcpy
__CxxFrameHandler

Exports

Exports

CreateSpellCheckerInterface

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ