ab223a6596f3ed0115315f40a487fc22c34486b204603007a07fc94d2026b1df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab223a6596f3ed0115315f40a487fc22c34486b204603007a07fc94d2026b1df
Size

11.8MB
MD5

5789f48b36474e85fc1e02271ba08abe
SHA1

2c07f4ae83ac1f5e50f1305e549f107966569a35
SHA256

ab223a6596f3ed0115315f40a487fc22c34486b204603007a07fc94d2026b1df
SHA512

7435347b2c00f6f4ad0bf5429fcd4f42d443db1f95b8a266488a2d257eb6144ae799956292d4f285ca05801d9430c634c7900c95ce6b3e5ec73a10baec8ca21c
SSDEEP

196608:dE/X8zZnnhGS2EdNU1UGrXo/KFkawiFYveUSTEYmblKDKnTcFD+w:oMVnhT/dNMLNkkWW/IDluKAB+w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab223a6596f3ed0115315f40a487fc22c34486b204603007a07fc94d2026b1df

Files

ab223a6596f3ed0115315f40a487fc22c34486b204603007a07fc94d2026b1df
.dll windows:6 windows x86 arch:x86

dae72d9664daf2ca8979ff98252dc603

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExW

user32

SendMessageW

ws2_32

send

netapi32

Netbios

ntdll

NtQueryInformationProcess

Sections

.text
Size: - Virtual size: 421KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.FfC
Size: - Virtual size: 6.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

..u4
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.;[b
Size: 11.7MB - Virtual size: 11.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ