1ffabf86c8b0cd28e1ff56c9072a1e69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ffabf86c8b0cd28e1ff56c9072a1e69
Size

37KB
MD5

1ffabf86c8b0cd28e1ff56c9072a1e69
SHA1

ccfc4891124d12b81ab4b217eff5d34f028da26a
SHA256

7b979e9c9434e8b66e37e8fbd0a1b4d586a7a190b485ecfa56ea3a34e869029c
SHA512

bdbaba65c9c877ed9dcbe38087b6dbf883de465fd9228c2975378f9df557dfccdd8fc708db020fc31170ee45ee0bdc5012008706d205b65d025db148e14a429d
SSDEEP

768:KvgfzHa54pnPP0tfwX+BPNCw2Y6z8BZKYvA0YTZ:NLHaanPP0tZdN/WuBW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ffabf86c8b0cd28e1ff56c9072a1e69

Files

1ffabf86c8b0cd28e1ff56c9072a1e69
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 24KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE