f9dbfd6008383f3dff496ec30c1f720b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9dbfd6008383f3dff496ec30c1f720b
Size

56KB
MD5

f9dbfd6008383f3dff496ec30c1f720b
SHA1

ea0fe44d01ff6f7e994fa8fe047ee4f6b19da06b
SHA256

a21cce41e2eb5a370e2d6318f2e9db40c51b4f1ff0c10493f1d147d56d2f55c1
SHA512

3cb6461c81c0a8915b61c86e2f41480eb8495b10b99b4de0d7a80518542f81a4baf14c56c328a37b3fc434380972504371b27e4012e4ce41e89c57332e30ad42
SSDEEP

1536:MmD74FDeWjlDqYRwr30Fpb+4D5K3TPVX:Ma74FDBJrCcpS4g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9dbfd6008383f3dff496ec30c1f720b

Files

f9dbfd6008383f3dff496ec30c1f720b
.dll windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Exports

Exports

CheckForDVB
DelFilter
SendDiSEqC
SetBitFilter
SetChannel
SetFilter
StartDVB
StopDVB

Sections

.text
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 142B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ