af06160b1c0c8c7c90e6f5ccb5849e61 | Triage

Sharing

General

Target

af06160b1c0c8c7c90e6f5ccb5849e61
Size

460KB
MD5

af06160b1c0c8c7c90e6f5ccb5849e61
SHA1

88bacf9d86760737936f0fb1f02e0750d70fa0be
SHA256

b47577452fe527c6c8171199358cf6a24aa27521a199d4ef29911729ca3a4188
SHA512

6f59a00d0e5db34b573c4f0df4bb66fc6484d741830cb9cb51abe2ae85ada01f3e08ba235fe06decb3ffcc7f43240fc8a29bc6c41db3e65b5de2be31867f5e4f
SSDEEP

6144:HUcRj5DovOtQNPz5YEih/yFqOr5H95C44/qYHwmrxZjdvmKTut+Pl8iJ:0c58dNPz5xPCX/r57xvEe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af06160b1c0c8c7c90e6f5ccb5849e61

Files

af06160b1c0c8c7c90e6f5ccb5849e61
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GetClose
GetFPHMDM

Sections

CODE
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ