6d73ed83cb5d721b20daea006468220e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d73ed83cb5d721b20daea006468220e
Size

449KB
MD5

6d73ed83cb5d721b20daea006468220e
SHA1

db3abd7f9449bfea089e6f6fd997bda26fe7bdda
SHA256

e4f3a38b0e9b8c7f1dd35d244aad1094c0dbf33a4371c6e57a84c78343d317e6
SHA512

aefad296e8c5a49b7d13eff1d102a42928c0f11ec0163640430230e4586443f698a3db62715513016caea691cc4d252da7eb357f23ffdeeeaec0235d28285062
SSDEEP

12288:zwcL8Iev0UVz38AGK/50MLYgmAJNjQ9ee:1UvzVwny5ljmAJy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d73ed83cb5d721b20daea006468220e

Files

6d73ed83cb5d721b20daea006468220e
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

BMPToJPG
DLLEntryPoint

Sections

CODE
Size: 398KB - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ