ca5597ff9df907b5fa4c9a0be2d961af5a1bd7d189997795213308271337b5c8 | Triage

Sharing

General

Target

ca5597ff9df907b5fa4c9a0be2d961af5a1bd7d189997795213308271337b5c8
Size

164KB
MD5

2a9a3d5ecd803b89820d9d816f5d1203
SHA1

857ce79aad8ce6c8f7920d40c067c06a410100ef
SHA256

ca5597ff9df907b5fa4c9a0be2d961af5a1bd7d189997795213308271337b5c8
SHA512

5c775a04097346b06e8be12ae990e86b16457d4624967dd83d65a6f397b8e06e666d1d9735d39103a0fa65403fa153796ee5dec999fdc246a3089e289aeb9346
SSDEEP

3072:BBefihU8fQ2Sob/xg+eNV1A1I3aiI8i3GdVAzuECtNjP3/3ioP7y11a0E:BBefiv/12+2A1AIpFzxCtNjHSoPm11J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca5597ff9df907b5fa4c9a0be2d961af5a1bd7d189997795213308271337b5c8

Files

ca5597ff9df907b5fa4c9a0be2d961af5a1bd7d189997795213308271337b5c8
.dll windows:5 windows x86 arch:x86

fc47fd76b9a60699eeca15d304e88a52

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProfileSectionW
OutputDebugStringA
OpenSemaphoreW
LoadLibraryW
CreateFileW
GetProfileSectionA
CloseHandle

rasapi32

RasGetConnectionStatistics

clusapi

ClusterEnum

ole32

CreateStreamOnHGlobal
CreatePointerMoniker

advapi32

RegOverridePredefKey

user32

TranslateMessage

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ