3fd91667534aecb59b6806e72459c158 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fd91667534aecb59b6806e72459c158
Size

404KB
MD5

3fd91667534aecb59b6806e72459c158
SHA1

9e8093b4b0f822188144240348e89030be140360
SHA256

2fff759393376c88d9b9c7fbd120b6ffd17fd36ab52d4e4c6cb112ceab204624
SHA512

0f350ad2494dfc5627ee610474b09070fa823d75be560b62ba97f5cb225675ba91738b1875750ed48614a5b8f280c88041a9c6646a3acf7ecf9469b3fc359719
SSDEEP

12288:r5hKi9C6Daiaw2qyGTJNwn+P4UN52m74vc:r5hb9CK7Pfp7Qms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fd91667534aecb59b6806e72459c158

Files

3fd91667534aecb59b6806e72459c158
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

JLI_AcceptableRelease
JLI_ExactVersionId
JLI_FreeManifest
JLI_JarUnpackFile
JLI_MemAlloc
JLI_MemFree
JLI_ParseManifest
JLI_StringDup
JLI_ValidVersionString

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 332KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ