140027e7bed8e70f8f88bd9cc62957c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

140027e7bed8e70f8f88bd9cc62957c9
Size

46KB
MD5

140027e7bed8e70f8f88bd9cc62957c9
SHA1

d5a1ddfa99b231cb78ab0788a21e5b782bfeb5e7
SHA256

6ab1a03de53a53d275aab8058508d1e9a4ac590d0c9668696dcc2afd2de69ab0
SHA512

8f763ba0919c838086ca51a6a3b10ce119b5f80a639775f883487cf09246b1a10e80b991fc5de08ed2b5c48e836d7e7d6dad683e26eb69dbfc0731471942be1b
SSDEEP

768:xZ8qCFwnLkeORl4C9JzUcxMnDVCWsg+FRs1j43tpq3Ty8x:xg1fzURVChg+FYyzKbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
140027e7bed8e70f8f88bd9cc62957c9

Files

140027e7bed8e70f8f88bd9cc62957c9
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GetDescription
InitCard
NotifyDllExit
ProcessGameData
SetPluginsWork

Sections

CODE
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ