b1872cb7ecb2122c7db6e72b09379fffa0e6a17396b8f2002324adfd5707614eN | Triage

Sharing

General

Target

b1872cb7ecb2122c7db6e72b09379fffa0e6a17396b8f2002324adfd5707614eN
Size

12KB
MD5

76a8023a8f8b043f44f88df8496990a0
SHA1

446073df3536b53a8189106fe72b9a360d401d3b
SHA256

b1872cb7ecb2122c7db6e72b09379fffa0e6a17396b8f2002324adfd5707614e
SHA512

2149a8be65f467da6d356d415d112e66aa9d1f170ac25fb7b1910b84bc6f5152a9eb167da553a5008849161b8b95b605e8a58dd4efcb5fcde23d9d17a945c344
SSDEEP

384:148l1SmpRKW/lgTZbSBXQafHSul4B2GIV9r+PlralV:1j1jWW/iVb2XQfIV9r+sz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/kerbprsr.dll

Files

b1872cb7ecb2122c7db6e72b09379fffa0e6a17396b8f2002324adfd5707614eN
.cab
kerbprsr.dll
.dll windows:5 windows x86 arch:x86

730966cfeacc8646c038af7c3cf8951b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SystemTimeToFileTime
HeapFree
HeapAlloc
GetProcessHeap
SetLastError
FileTimeToSystemTime

msvcrt

sscanf
_purecall
??2@YAPAXI@Z
_snprintf
??3@YAXPAX@Z
strncpy

nmapi

AttachPropertyInstance
DestroyPropertyDatabase
CreatePropertyDatabase
AddProperty
GetProtocolFromName
CreateProtocol
AttachPropertyInstanceEx
FormatPropertyInstance
DestroyProtocol

Exports

Exports

KerberosAttachProperties
KerberosDeregister
KerberosFormatProperties
KerberosRecognizeFrame
KerberosRegister
ParserAutoInstallInfo

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ