a397a498b1bc491c9fe6ef489230b1f9e9d476490f976d8e23a751448837ff6e | Triage

Sharing

General

Target

a397a498b1bc491c9fe6ef489230b1f9e9d476490f976d8e23a751448837ff6e
Size

2.4MB
MD5

7b99d3434c5d192f77a408fb11b87e13
SHA1

a6ce85996f0db76b9e5a13e86c1dece26b1b72fe
SHA256

a397a498b1bc491c9fe6ef489230b1f9e9d476490f976d8e23a751448837ff6e
SHA512

1442290ab6714b512d17f48579f8395e290151be54aa137308e35ab74c53dc45ee14aa028383b6fcc8e709b249341354572a7ca4b558a9159060f05a979392b4
SSDEEP

49152:9XTb9eHxn/gZvPbN1AZPqdhL9QNGtQJTDC9l+Zzh6yAD3fKXMChjEHQSCgd:9DbgHx/glPh1ddhL9biJq6ZzQ9CXMChb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a397a498b1bc491c9fe6ef489230b1f9e9d476490f976d8e23a751448837ff6e

Files

a397a498b1bc491c9fe6ef489230b1f9e9d476490f976d8e23a751448837ff6e
.dll windows:5 windows x86 arch:x86

6ca469609ffaa00f515d1fc9c319fbf6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

.uyrGpyAY1R3sCch1*yt-@CGtiZtkPZ

Imports

netapi32

NetShareGetInfo

kernel32

GetFileSize
GetModuleFileNameA
LoadLibraryW
GetSystemTimeAsFileTime

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 799B

IMAGE_SCN_MEM_READ

.data
Size: 300KB - Virtual size: 301KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 692KB - Virtual size: 690KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ