5f0878f40ae40b021b071701b8d05dc9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f0878f40ae40b021b071701b8d05dc9
Size

12KB
MD5

5f0878f40ae40b021b071701b8d05dc9
SHA1

6009adc96d9eed60e9c896c2503865e4cbfec8f7
SHA256

e338e07301b57657d7849f6209403630bb3877cf839db80b6432017c7cdd7b89
SHA512

bbff68b4c6d61e45439b058ef9b12adffac28d27465f0043bda786992eec1ccc0ccb6d33dfef0480bbc365724dddd8f76da96869b7be77e5ce98d28736d3e8b5
SSDEEP

384:9DSrj13G7yr2FEt+XukZhAEBpnyYKkok2X:9813m6UEt+XfAnYKDB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/.sys

Files

5f0878f40ae40b021b071701b8d05dc9
.zip
.sys
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ