0d48712bdcc54edb56760ee170d61e7f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d48712bdcc54edb56760ee170d61e7f
Size

238KB
MD5

0d48712bdcc54edb56760ee170d61e7f
SHA1

61bf41a234b4954e1c31b1d364775852f9a0eb78
SHA256

0a0d0034a51037f9258ca0faa30a221137f770e199686cfa1a569748d452c17f
SHA512

2b8b49fc4b2f8d2c10a5ca21dfae88ba38a206011167ed1ee74385ed60e3457e4ca5cbd74a39404f1637468639e6a79036132f6868c3778d92617d7890d4e2d3
SSDEEP

3072:pZnnjRRiCG17H67ycsT2jc2ruqs3lOu7jhupNHU1ZZqGU7mUz7DMFA3xSN9VfHA1:3nzu17a7fs/D91kU1WN7DwAkf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d48712bdcc54edb56760ee170d61e7f

Files

0d48712bdcc54edb56760ee170d61e7f
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ