9480e498ebc2efa6bd677bc8f44e612560528c584f0cbe8e7ce3b1d59cbab17c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9480e498ebc2efa6bd677bc8f44e612560528c584f0cbe8e7ce3b1d59cbab17c
Size

2.4MB
MD5

329ff0977c36d6bad728ee0234541cf4
SHA1

94484cff502efe8b13efcecde6e36fd01cf26ccb
SHA256

9480e498ebc2efa6bd677bc8f44e612560528c584f0cbe8e7ce3b1d59cbab17c
SHA512

c02a5c3279ab509f06468b383c7e457cfd893f083e6dd9e94a5d6e1d15361b337fa3f0fd4e4cc5ce02053f64b9e4243d19e1759eab38a6ce4a259a1781ae6b01
SSDEEP

49152:JU70S+QZfhFRWrsNxrH7VFpn0w+JYZR265XecGyh9tOrDSBOkcuO:JU3fvREqnLn0zJYZRb5Xvzt22BOu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9480e498ebc2efa6bd677bc8f44e612560528c584f0cbe8e7ce3b1d59cbab17c

Files

9480e498ebc2efa6bd677bc8f44e612560528c584f0cbe8e7ce3b1d59cbab17c
.dll windows:5 windows x86 arch:x86

e0aa0cdbe23b0949df2a7f5e1a99759a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

.uyrGpyAY1R3sCch1*yt-@CGtiZtkPZ

Imports

kernel32

LoadLibraryW
GetSystemTimeAsFileTime
GetFileSize
GetModuleFileNameA

netapi32

NetShareGetInfo

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 799B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 300KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 692KB - Virtual size: 690KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ