13b96a2b6e9168c9eceeb0d91bfa6573e2049912600ea8433751e9da96d91b19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13b96a2b6e9168c9eceeb0d91bfa6573e2049912600ea8433751e9da96d91b19
Size

2.9MB
MD5

e679f103870ead979f38251f87a14133
SHA1

53d88ddee9de4c152c7579eee1c1dbc90fee33f6
SHA256

13b96a2b6e9168c9eceeb0d91bfa6573e2049912600ea8433751e9da96d91b19
SHA512

5fd0a6f5af5dea7d4ce9aabb0b2472e40d96e355be1a461b8748e0f8d80b9f258ec738a705503a8bce645ec74081da04ca8e6a3f5f97541b92c0c49e4a6a0152
SSDEEP

24576:gewtxjcpOFChEgOiHWm2jtI8C3FATOPTOPT12eIUmm0kBnMwwMIRt:DwtxQpOFChEgOi21tI8C38h0kIX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13b96a2b6e9168c9eceeb0d91bfa6573e2049912600ea8433751e9da96d91b19

Files

13b96a2b6e9168c9eceeb0d91bfa6573e2049912600ea8433751e9da96d91b19
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

CBATTACH
CBDEBUGEVENT
CBDETACH
CBEXCEPTION
CBINITDEBUG
CBMENUENTRY
CBPAUSEDEBUG
CBRESUMEDEBUG
CBSTOPDEBUG
CBWINEVENT
pluginit
plugsetup
plugstop

Sections

.text
Size: 436KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ