fec0b20dbccfcf087db8a93d504f0572 | Triage

Sharing

General

Target

fec0b20dbccfcf087db8a93d504f0572
Size

118KB
MD5

fec0b20dbccfcf087db8a93d504f0572
SHA1

f3d49cd72640c87f3b390fc4bbc2e42ca0d1d7ff
SHA256

ab968477fe6968f22137e766116a06bed64366111ff5416f12eafdc348d1b37d
SHA512

e810f9e43df3d095a3a3ee2abde05172f63e36db930c4c8f775e059a3f77931bef8683f08cb3e9ac8e06c31ebb14a417e5e08740545d498909d25813165c89dc
SSDEEP

1536:YFuCgaNMeCl6QUlMzJWJL56BSew0t8wA+lqAH7m1Y/Paej7kaTxPOYxAi+EK/fFw:W06TlM1WxwMs8wblqAV13PfAiTWNw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fec0b20dbccfcf087db8a93d504f0572

Files

fec0b20dbccfcf087db8a93d504f0572
.dll windows:8 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

pzLRgAOd
JXlAkJcMZDo
wmHNTEHTDMPZ
EJwRBzcGWAkYF
SMjuvXXFR
NEGIKXQIRD

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 664KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ