f1d516e28be7c07b3ef0abb341ad497b94656b91af0131d5c399991f7b8b4f74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1d516e28be7c07b3ef0abb341ad497b94656b91af0131d5c399991f7b8b4f74
Size

2.3MB
MD5

5a3cf0459d2764619a1d79c32182df11
SHA1

5e11bbda45b8aff47f3defea4ca9fcf084799413
SHA256

f1d516e28be7c07b3ef0abb341ad497b94656b91af0131d5c399991f7b8b4f74
SHA512

e3c6bfc0fdf5907631fc862173f7370e1fe61df86353ec3bba4a8798a772ff0e862fc8fc7cd61270b6c6f63b2c5bea22bec16d1ffd47236df583114aa3f1855f
SSDEEP

24576:ODP9d5uy6ceDP+/lXf27pc62J7yXPvK0Xpza4bTu406ssWczHWhCSWWf1v8KkfFS:OxtON2J7s/M4zBO1UxfuY4FF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1d516e28be7c07b3ef0abb341ad497b94656b91af0131d5c399991f7b8b4f74

Files

f1d516e28be7c07b3ef0abb341ad497b94656b91af0131d5c399991f7b8b4f74
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

MQ_End
MQ_Event
MQ_Info
MQ_Message
MQ_Set
��ݿ��
��ɶ�̬��

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 800KB - Virtual size: 966KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.Silvana
Size: 300B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE