SG[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SG.dll
Size

13.4MB
MD5

59e1563055e9dad49b400e23a8e24e2f
SHA1

0f044bc7bd077ea4cb1ae523b71ee0b6323e555f
SHA256

df335913f38ca7a9bc9f16e8d602909b6bab5207b642cb8bf85e9897146aa53b
SHA512

7c61face6528bcfe5315d77c0aa794f819c4e4208a9b2fe5aa8b319853535c1c29261c574ff7047dd275265c55a6ffee8630104f35155b1f26c1b872e669c49f
SSDEEP

196608:fqFk36TB6yg2HW1GrG66aJeYD5O3Lby7tnrronYC3hFD6+1OGMlta0:fqFgrUL6TYDcqxngFDXOGMltx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SG.dll

Files

SG.dll
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 377KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13.0MB - Virtual size: 13.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ