fb3024642f57fddabcb52c0b2bd051ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb3024642f57fddabcb52c0b2bd051ef
Size

60KB
MD5

fb3024642f57fddabcb52c0b2bd051ef
SHA1

b82b0fa1d3171f4a2cf8308909b5090b174f9d64
SHA256

33d865c783ff17a3cb8968ae3d3bd0c9986e4b3735d82b2f283a40bfd88987d8
SHA512

3d7df5e7bb6a06d1af9cda43835fd4f6c8b13883c3021c76cd20285aeb502a366975375c88deb6869912a1521bc482f351b3378e17e15458888cf690743bddcc
SSDEEP

1536:YN7DbLlp60LaLwRLLtTI1RbPq4vK/PRh0JFAQHKCFS9LyJR:YpzRLaM5iBPq4viRJQHp8AP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DSC0603011.cpl

Files

fb3024642f57fddabcb52c0b2bd051ef
.zip
DSC0603011.cpl
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ