1f158fb47ef01342e0c41c789f886a74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f158fb47ef01342e0c41c789f886a74
Size

57KB
MD5

1f158fb47ef01342e0c41c789f886a74
SHA1

e66441c802beaf978bbdc025fa17f6f9253a5e6e
SHA256

ce536d35e155f3c73f309f24556267e6fda76e5192adc397fb8144abe7aeb9ba
SHA512

7bed542dcc5dc4fd3cd241efdcfbd8ca24cac9333e77b8be53a5e499e3e0d9f5cd0d903319294609e5054a989d30d3c57d5ee5e0205cfd80585dfcaac4938f63
SSDEEP

1536:xxEvhRtioyQnkfTp/MQ8FTF1Nora1p+zD:3iRtioy/yHF1NvW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f158fb47ef01342e0c41c789f886a74

Files

1f158fb47ef01342e0c41c789f886a74
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 18B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ