5c924dd4089e40bba254c5bacaeb8e24bd4697f4753d0e7aa52e6fa00d0fc6fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c924dd4089e40bba254c5bacaeb8e24bd4697f4753d0e7aa52e6fa00d0fc6fb
Size

224KB
MD5

4ec9688fe37fb58a693573a33dfb2e9c
SHA1

1e49752326d94e14b0138eb3af01c9042fbbcc00
SHA256

5c924dd4089e40bba254c5bacaeb8e24bd4697f4753d0e7aa52e6fa00d0fc6fb
SHA512

a2c7adbf528a8d34a1eba06afbc7134171606c808ef4b1d0b3e810657dc47adc4570047356020e9c63ede97cd4b8cbf2c1709863c94bc0d2aace79d61d81faca
SSDEEP

3072:JmqlP0tOZmr2y2p250vlEK2490G7oUOnuTiz6rZ8ZgBczPgvwzVfu0/moGqzK:8qlP0t0mr2npC0vlHb9J5dc25cWCFsF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c924dd4089e40bba254c5bacaeb8e24bd4697f4753d0e7aa52e6fa00d0fc6fb

Files

5c924dd4089e40bba254c5bacaeb8e24bd4697f4753d0e7aa52e6fa00d0fc6fb
.dll windows:4 windows x86 arch:x86

ff5dce5d4e8aa83b016e24ae170866c3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

transfer.pdb

Imports

kernel32

RtlCaptureContext
GetThreadPriorityBoost
GetPrivateProfileSectionW
WaitCommEvent
SetConsoleMaximumWindowSize
InvalidateConsoleDIBits
VirtualProtect

Exports

Exports

ApplyReturnNative
ChildArrayBackup
DocumentValid
GroupBuildExpand
InformationPimMember
InheritanceImplement
JscriptSend
MethodPointerProcess
ReflectObject
RelationDetermine
SecurityPurchase
TimeMovementMove

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ