d61d1ec09b1f935d8ee6bf319a7418c0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d61d1ec09b1f935d8ee6bf319a7418c0N
Size

10KB
MD5

d61d1ec09b1f935d8ee6bf319a7418c0
SHA1

ac27dd490025686dbd2c9118a22b79f272d2f9b2
SHA256

92a78af8677730f5c109b304a2b68f1097ad41d98754dffed010c3c2b15fc4ae
SHA512

a4bc1f32d268f9295f2af67bb7a917fda757f93ea6e8c1c68d95eedf823198b5c771a393d49a63fc7aed01f013ea3607f8c96bcda34cafc01d71c957d5d85c85
SSDEEP

96:NDDBwY/5znksvBawnG04jjFHunEAfZ6Z9ZvNDqrrZB3hS94fAZK/OrWLIlYTxXzR:NDD1Rzvvc81h6QApItbE0FVECYe4G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d61d1ec09b1f935d8ee6bf319a7418c0N

Files

d61d1ec09b1f935d8ee6bf319a7418c0N
.dll windows:4 windows x86 arch:x86

d9897786bb81b8660a6c9c9bfa5a0132

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
Sleep
CloseHandle
CopyFileA
CreateFileA
CreateThread
GetEnvironmentVariableA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
MoveFileA
ReadFile
VirtualAlloc
WriteFile
lstrcmpA
lstrcpyA
lstrlenA

Exports

Exports

send_request

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ