popish[.]dat[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

popish.dat.dll
Size

743KB
MD5

ea8c8dcc622789e8fbd459ececb76eb5
SHA1

431dd17f86d4d34254310ee4e872b07461d17e52
SHA256

616a531ff72b31cd7f9b6093bd98db343fa42907127dc82763539d34f49a4e88
SHA512

fe193e67d9461857834dd49495ff5f77ca71c38db836989aecc181773e66e4c5321acec91e3f71aca228015feff7187cd87e4b341279bc768ded6867b17020f4
SSDEEP

12288:e+4QHixeljmtjVFJcPp+cygICZoxlSr9s6q6xMZXJMeGbX//7OT:5DXjmtjVD3cygICZwSJs6q6yZXJM5T/c

Score

N/A

Malware Config

Signatures

Files

popish.dat.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 459KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 230KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ