02122dd0bb6199e6458d78c987510bca | Triage

Sharing

General

Target

02122dd0bb6199e6458d78c987510bca
Size

6KB
MD5

02122dd0bb6199e6458d78c987510bca
SHA1

6fd3847c602cd9943df3c016431de878660afc10
SHA256

e5c37306f29bca67645eb063150458c43c40b50ecbc9710ba59e4e8693888c42
SHA512

62058a78f5c947888c0140942f28385c36ae63bc14b63b386c4bf3bb782c596e3c1f7401ae81a6a4024f0db857a4444648732860ae4ab68d40cf20ed056f5491
SSDEEP

96:nPO85ZXjMug1PBdz7SO8PYI2wZKh/xxUzrGbDrmu7F+Habb4F6:nL5JjMug8OVrL7fF+64F6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02122dd0bb6199e6458d78c987510bca

Files

02122dd0bb6199e6458d78c987510bca
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

Size: 41KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.petite
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE