5e8188c5a8b94ba51a0cc2f9e0cad0db445bee7e0fa4f1955627ac44103534f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e8188c5a8b94ba51a0cc2f9e0cad0db445bee7e0fa4f1955627ac44103534f4
Size

4.6MB
MD5

17459c1b2b2ef277a7ed015caf0cfadd
SHA1

f6a8e44c7b91ded2ce099f3b0feb94ca77c68483
SHA256

5e8188c5a8b94ba51a0cc2f9e0cad0db445bee7e0fa4f1955627ac44103534f4
SHA512

6657627b8b69cdc9e8636a54836e3c9bcf1f77ab81ad841408b3974491fc3be6a4fbe106739e9ff702b1be34b4586a6c0a9124d767edfc16141c61c9f36bc46a
SSDEEP

98304:2u6vOjpN0H3zgdXgK3c8iBxFs2iqkyyMtFHzkYhAxcikKql3WY:5Bpm2R3ZEtpz5ATkK63P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e8188c5a8b94ba51a0cc2f9e0cad0db445bee7e0fa4f1955627ac44103534f4

Files

5e8188c5a8b94ba51a0cc2f9e0cad0db445bee7e0fa4f1955627ac44103534f4
.dll windows:6 windows x86 arch:x86

b4ca6f0ad0fe5ce382aa3bee0f2fba93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

Exports

Exports

_SbieDll_Hook@16

Sections

.text
Size: - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.h@n
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

./=A
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.>q]
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ