6188cc711e969df9428716c6655524a8 | Triage

Sharing

General

Target

6188cc711e969df9428716c6655524a8
Size

54KB
MD5

6188cc711e969df9428716c6655524a8
SHA1

c066bfa8e3f310140bfc986fe09ad3dfdbb4e769
SHA256

e75606fee2de946d628bce065423780c228921c167c95a7297c45989eb1fbf0e
SHA512

e5a8032682274853777a613efab10bd555192cde5a87726b6d9b6fa3549d6b615e523a60e371de847b7945726945ca6e161b0cb9ba831adb7984d7227b52101d
SSDEEP

1536:epiZea6EoqNrkSZP1rFSLZxhRXnUlPiohO:OAZ6EpNQSt1xKB9nUEp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6188cc711e969df9428716c6655524a8

Files

6188cc711e969df9428716c6655524a8
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

htomaota
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ