d2a6ba5aeed3bc82cf75a12a7dab52ed8569782fc856ba1d0a52e7eeb13529e9N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2a6ba5aeed3bc82cf75a12a7dab52ed8569782fc856ba1d0a52e7eeb13529e9N
Size

92KB
MD5

f1ac1b40762cdfe64bf09ad7dc9be310
SHA1

503fbb9968e144fa998e700a5552bf95ef18569a
SHA256

d2a6ba5aeed3bc82cf75a12a7dab52ed8569782fc856ba1d0a52e7eeb13529e9
SHA512

e56470794a161eaab9a3c3ced480ba5a0584f8e789a73774c5132ffac334d58f412461094b5d9ba0858a842ceeab38ed3ed0a1f950edfa4ea76327909fd59de3
SSDEEP

1536:VArA/xZbCUnN2C6ODu31tGcKF4AgtYzUoozS3TiZr/BaKkVMsf:VArKQUnNJj41Vo+iIr/MKqMQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2a6ba5aeed3bc82cf75a12a7dab52ed8569782fc856ba1d0a52e7eeb13529e9N

Files

d2a6ba5aeed3bc82cf75a12a7dab52ed8569782fc856ba1d0a52e7eeb13529e9N
.dll windows:5 windows x86 arch:x86

a3b48623ba8ac7160c103729fc37fafa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ohm_vn

ord2

Exports

Exports

InjectDll
UnmapDll

Sections

.text
Size: 86KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE