00e48e0f8dc0dc489e57063ebe60d6bb | Triage

Sharing

General

Target

00e48e0f8dc0dc489e57063ebe60d6bb
Size

27KB
MD5

00e48e0f8dc0dc489e57063ebe60d6bb
SHA1

cc9ddc2c087bdbfbfdf29ea729586d1afdcd7998
SHA256

8f18138889fc5c7ce9bdf6cf03f510b20281de7f306b7b3fc8586831bfe023fb
SHA512

bdb97a1f197493fa8bf7f84fb4ba6f7c6919604594a7d5337bbf486b460f1565015d2205a147a380e262017c858fb061e21b5ea14152de01895fce071d6ace18
SSDEEP

384:X5yuzmk3ySFy81TvV5OlP9HkGlY8MIyjwQf4Zx6Ksg+CueRrwuI171j1KA1S1GIL:XM81TvV5ghkWY4QwZ8KfjmlIvTsK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00e48e0f8dc0dc489e57063ebe60d6bb

Files

00e48e0f8dc0dc489e57063ebe60d6bb
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

zyd16

Sections

CODE
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ