05b1cd8c8be06faa59142953bd967b82 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05b1cd8c8be06faa59142953bd967b82
Size

149KB
MD5

05b1cd8c8be06faa59142953bd967b82
SHA1

5cb20354c28327432cf34d4a3367eec218e6c002
SHA256

67bcdacd3b3c2403fd2069f88a37ff4f88adfacae9431a82dc789edffd56341c
SHA512

faad5928325ad52c079ba42ddd3ddea2e452125f6d24f9ab380e12b596f50dd2207d36e388bcabfc4be39fba03aab3bdeb56a74e683c74b36db4dcdc1eb889ce
SSDEEP

3072:5RDd47Vk+SOj/g7iLAwFJgYHafmR0qKOesoryOzzH+81S3cRR+bw:rDOmah1PCr1+qyb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05b1cd8c8be06faa59142953bd967b82

Files

05b1cd8c8be06faa59142953bd967b82
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain
astart
hook

Sections

CODE
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ