1d92f25a2da6b5091e2cda9f625fb92f | Triage

Sharing

General

Target

1d92f25a2da6b5091e2cda9f625fb92f
Size

72KB
MD5

1d92f25a2da6b5091e2cda9f625fb92f
SHA1

aa7603d43825496bcd606eb253ebc84daa8969cf
SHA256

2f42951b1d735d6e3c240d1ecf34713ff8595176038b177af81de56d78afa175
SHA512

59226952211c503dc581897089172037efc39ed0b29a84371f7bb7f420848c788dcfcf4adcb28a9aab6bb12630e9391f28f32cdbbdd2a73cccf15503453ac5b9
SSDEEP

1536:2p+c2C7ZdUeZvziGr/vFD2q5YvCwS09FdvII9ZHiu:2d7ZdVZ79r52qOCwSKRIGHiu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d92f25a2da6b5091e2cda9f625fb92f

Files

1d92f25a2da6b5091e2cda9f625fb92f
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain
ThemeServiceMain

Sections

CODE
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 66KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ