1063a7784d207c6e533b2ac9f1410b1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1063a7784d207c6e533b2ac9f1410b1c
Size

14KB
MD5

1063a7784d207c6e533b2ac9f1410b1c
SHA1

a2916d726a9b20b0682819ccc14c29d6d95c4bb0
SHA256

ab3f0c043c1c55b36123fdb0cfc17dd84926822a50457b72ef042d5c1d069162
SHA512

5d11778180198b7f57995c416f712ae1295dfd66dee75f60272d2db111e28f5e622eb0db5e023acc7d4137d5550833c4e4938220e8e56d4d7536ef0768fd8102
SSDEEP

192:CPByzP0cH+W3jNxCRDcX6Oa3Bpph8LC+iXVa60OMiWDubd0eMVjq:CZOP0cH+WHw7/Bpph8LCxVa6w80RR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1063a7784d207c6e533b2ac9f1410b1c

Files

1063a7784d207c6e533b2ac9f1410b1c
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ZtGame_IN
ZtGame_OUT

Sections

.code
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE