11990802b3d9fcfc4e4fea3b9f09cc2b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11990802b3d9fcfc4e4fea3b9f09cc2b
Size

213KB
MD5

11990802b3d9fcfc4e4fea3b9f09cc2b
SHA1

08bec91765a13948a30cc295fe86d59dede8a828
SHA256

e9367559c5ccabb62f08ff2c3538c07431192f2d7f6d493427b8944c1a08121c
SHA512

5c73202a3ac603a4a0db0b8b3499a48d69b847a6e8c0bdc1d253d0743836be5fdf4c0589402bad712053d75aac672d44e0e0d6efdc496e734fa51e84bf3bd5f8
SSDEEP

3072:LeQAQ/+Hyf66s1vVptWwPIwUY0kM6SVkyW+tWmTFDA3UPRf3q4vHWt:LeQAs+SsWfVHWh+tWOlAARflvs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11990802b3d9fcfc4e4fea3b9f09cc2b

Files

11990802b3d9fcfc4e4fea3b9f09cc2b
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_SYSTEM
IMAGE_FILE_DLL

Sections

CODE
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 143KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ