1d8e5161614d84b410d25706f77552c93ce9dd86622ff80eb055c8d320ff6335 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d8e5161614d84b410d25706f77552c93ce9dd86622ff80eb055c8d320ff6335
Size

2.2MB
MD5

80327a43736213297a98694c7b68956c
SHA1

c69f779b1f6d0a655413091c75e788a6264c140a
SHA256

1d8e5161614d84b410d25706f77552c93ce9dd86622ff80eb055c8d320ff6335
SHA512

7a0ab86250b88eb143871c977a3f3dce8c570eecd293c4945025c276d37c84c38b0421e4b368ef78b1db274a172ae6b571ca87c5b157df349a7039513374a604
SSDEEP

49152:SrPqilrsKINoVwVOWOySlkfP1ahHNi64bh5TtBFB:qaNhVOZknqNxujTtB3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d8e5161614d84b410d25706f77552c93ce9dd86622ff80eb055c8d320ff6335

Files

1d8e5161614d84b410d25706f77552c93ce9dd86622ff80eb055c8d320ff6335
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

crInstallW

Sections

.textbss
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ