004856af1a576e78a5d86145bf19cd94 | Triage

Sharing

General

Target

004856af1a576e78a5d86145bf19cd94
Size

72KB
MD5

004856af1a576e78a5d86145bf19cd94
SHA1

f9321fa7fe4777f1edf82adc464bce0eaf5fba93
SHA256

a9aa636f92e13e58303671a22bef22e88c3bb8b6fef709d88b5b4709f219d334
SHA512

fb7bb70e2f0e37700e5860ec99693151f60b982a7df8827398c2709bee0e44b72b3abd483644215de4aff7ba35fa98fd0f6e64d25acb8f75a986a698eb801c5f
SSDEEP

1536:UfvdEM8zZeEd6v4hlA8NuqLzs4sm7WI+4DmM6fsW7d:UXdv8zlds6QYzs4sm7WI+4DmM6fso

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
004856af1a576e78a5d86145bf19cd94

Files

004856af1a576e78a5d86145bf19cd94
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

fX~?L
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ