XyU8ZgqTP[.]dll[.]bin | Triage

Resubmissions

12/05/2023, 09:25

230512-ldx2asce74 10

12/05/2023, 09:12

230512-k6fr2seg4t 10

11/05/2023, 18:52

230511-xh539aaa88 10

Sharing

Copy URL Twitter E-mail

General

Target

XyU8ZgqTP.dll.bin
Size

627KB
MD5

8913a9551b5895bd57370f88274c80c2
SHA1

111d5ca894dc029d576a779a4b20ee5728a5db75
SHA256

0bb71786dd42fced85fd4d47da823753e83a5cb6af260bf67bb116905c8328d3
SHA512

684acadf678a8aee29df09c80d1f121474cc00d316b6f8407bc99e76f20ff7a54d3f1c6b3fdbcd56e494b07a1908fd83c57a3148970da839d6f4668820363e92
SSDEEP

12288:qzbDRgCdJy+vKjt/hp2JIdK6DOAj/di+I/dzAwuFQ5fC:qXVgoy+YdbKh6DOAjVi6wuFQ5fC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XyU8ZgqTP.dll.bin

Files

XyU8ZgqTP.dll.bin
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 410KB - Virtual size: 409KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ