9b0ca50089b723a0e7f801160deb7766433bc25982c2d0f0920a13a9acde3275N | Triage

Sharing

General

Target

9b0ca50089b723a0e7f801160deb7766433bc25982c2d0f0920a13a9acde3275N
Size

4KB
MD5

2b2a1a0d1361849b0fe352c3c3b99340
SHA1

a53fc2f4729981230fb254b0e4cbc2c5e9368bc8
SHA256

9b0ca50089b723a0e7f801160deb7766433bc25982c2d0f0920a13a9acde3275
SHA512

0c13159cc6f82c7aec8bf09142e33710d388df1d611985ba8cdc3c696c3938bbf49e8cc4861543f5c7d13dfdfaeb79d4eea8af5ca5d5fba130b904685848697a
SSDEEP

24:eH1GSyk8zX0lVY+AQ5gdaut2pZQi1iKHlcXglQp274C+/lXgwFU3K3RbRkjudbjf:yyk8regdam2pZp1i6lc7HlPbkKNfPY01

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b0ca50089b723a0e7f801160deb7766433bc25982c2d0f0920a13a9acde3275N

Files

9b0ca50089b723a0e7f801160deb7766433bc25982c2d0f0920a13a9acde3275N
.dll windows:4 windows x86 arch:x86

d7d03cfcde314dd9338220f955e0c9a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetProcAddress
LoadLibraryA
ExpandEnvironmentStringsA
lstrcmpiA
lstrlenA
DisableThreadLibraryCalls
CreateFileA
WinExec
CloseHandle

advapi32

RegEnumValueA
RegDeleteValueA
RegOpenKeyA

Exports

Exports

DriverProc
auxMessage
midMessage
modMessage
mxdMessage
widMessage
wodMessage

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ