c65c51ed60f91a92789c4b056821ef51252baa2a1679a6513ab008acf0464ccb | Triage

Sharing

General

Target

c65c51ed60f91a92789c4b056821ef51252baa2a1679a6513ab008acf0464ccb
Size

3.7MB
MD5

8e7115ea580f39c152e4d4bc4472c402
SHA1

4ea1f1d8a01f251fa5db350f72b04a1d11028fb0
SHA256

c65c51ed60f91a92789c4b056821ef51252baa2a1679a6513ab008acf0464ccb
SHA512

bde81a4da80dda9e06815b153caa2dcaea874bfd973c9d24b1e935e0c88a0d094dcce0b153d9866a87b2b06bc636a30b23d3fe27e345b4a2ee174b52acc44619
SSDEEP

98304:XZo5q0spyUTJkqVnIY0z7ceiVNhPvpx3:XZwqlp51krrz4vp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c65c51ed60f91a92789c4b056821ef51252baa2a1679a6513ab008acf0464ccb

Files

c65c51ed60f91a92789c4b056821ef51252baa2a1679a6513ab008acf0464ccb
.dll windows:6 windows x64 arch:x64

a5d156f0c03955fd5c90a10345646746

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
CreateFileA
FindFirstFileA
FindNextFileA
GetFileAttributesA
GetFileInformationByHandle
WriteFile
CloseHandle
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleExA
GetProcAddress
SwitchToFiber
DeleteFiber
CreateFiber
LoadLibraryA

Exports

Exports

shjKeAQfgT

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ