751a9ed0cb1c0381cc0e23404815b432da7eb20ff8c6c48fda6f859563d16e07 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

751a9ed0cb1c0381cc0e23404815b432da7eb20ff8c6c48fda6f859563d16e07
Size

3.4MB
MD5

771c1ae5c7cee446e51e596bfb1f302f
SHA1

48bb1f6e00988fb4138140bc997bcaeb4a818d54
SHA256

751a9ed0cb1c0381cc0e23404815b432da7eb20ff8c6c48fda6f859563d16e07
SHA512

07b97792969246113d53515800c0619327c9662692b1a93d88baa0051e1c368d6e8ad035119577306ca2baabf64c0280e3d31732817a5c407f1e91cff919f291
SSDEEP

98304:MrVangCuHncAQJgrVZfX5YtGP/6A7NGCSbmiH7bzb:iz8RJUVZfCGP/JJG9H7/b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
751a9ed0cb1c0381cc0e23404815b432da7eb20ff8c6c48fda6f859563d16e07

Files

751a9ed0cb1c0381cc0e23404815b432da7eb20ff8c6c48fda6f859563d16e07
.dll windows:6 windows x64 arch:x64

488c62c0529b672143b44c2daa2e32e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary

advapi32

RegQueryValueExA

shlwapi

StrStrIA

iphlpapi

GetInterfaceInfo

msvcrt

_wcsnicmp

psapi

GetMappedFileNameW

user32

GetWindow

shell32

SHGetFolderPathW

Exports

Exports

RTEntry

Sections

.text
Size: 2.2MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.12F
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.12F
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ