011a2aa43c5f01c6e08d2e95f9a3204a | Triage

Sharing

General

Target

011a2aa43c5f01c6e08d2e95f9a3204a
Size

140KB
MD5

011a2aa43c5f01c6e08d2e95f9a3204a
SHA1

61b5616bb97ac93d950eb7c6ff8f482772feed0c
SHA256

3e23e67df3f8822051146b3931e0df79ed07070638bfa1cfb967d0314c5fbae3
SHA512

0c6ae51716c794de972e79fb8bcf9bb17e5e15dba794078972347f7b48c23c2f899effd305425c8a5ef500ef4553809b785c2dd1add57386b516fc8bd4cd3bb6
SSDEEP

3072:7Gd5SpXBaY0Iw+dxCbT2HywffPQ8evCt4RJ:Cd5kXUbIR6T2lnQ8n8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
011a2aa43c5f01c6e08d2e95f9a3204a

Files

011a2aa43c5f01c6e08d2e95f9a3204a
.dll windows:4 windows x86 arch:x86

47b95eaa8a92898962a601a6fb44ee48

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
free
malloc
_initterm

kernel32

DisableThreadLibraryCalls

Exports

Exports

JGS7DecodeBlock
JGS7DecodeBlockQuery
JGS7DecodeCreate
JGS7DecodeDestroy

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE