f0460c31bd4a2491b9195a8760c59128bd853a345663e6d9ccb4ec9d565df791 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0460c31bd4a2491b9195a8760c59128bd853a345663e6d9ccb4ec9d565df791
Size

1.6MB
MD5

ce55028dbc90dd9dfddedc543f23ff07
SHA1

47dcbf670804d8fd250bbda0a2a5926c09cad508
SHA256

f0460c31bd4a2491b9195a8760c59128bd853a345663e6d9ccb4ec9d565df791
SHA512

12712528c5df694a63e6cafb7eee320c33766d9ac23f5e0ecbbd791db36739cc2b566d167e06e582af401405bb6ef8618c7f246176626d6d0796044984a94a3f
SSDEEP

24576:HbBVx5eNsstxlRw6l5v70Vv07bfV76F3dZDa3Cb2byC39bnakLwyhz:7W3txnV/hcF3dtaSCrL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0460c31bd4a2491b9195a8760c59128bd853a345663e6d9ccb4ec9d565df791

Files

f0460c31bd4a2491b9195a8760c59128bd853a345663e6d9ccb4ec9d565df791
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllGetOEMControl2

Sections

.text
Size: 4KB - Virtual size: 55KB

IMAGE_SCN_MEM_READ

VProtect
Size: 616KB - Virtual size: 616KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 996KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

VProtect
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_MEM_READ

VProtect
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ