11d7e611193d429856828ba3e75f97fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11d7e611193d429856828ba3e75f97fb
Size

43KB
MD5

11d7e611193d429856828ba3e75f97fb
SHA1

25b6ff71c859b67e0025454eb5d323466a86b256
SHA256

960318334f0501056e1ae4d055774114f5ef00d51c28d1f039b04312ee8bae0b
SHA512

634e0eeb1d09e46ea12bf37f36a35fb9cddbd06a066197e7861994c3af2817d649d1fbc3f51432058133f854a7b3b50cf30cd663690b9a9cf9cf9d61f2022354
SSDEEP

768:Fv+5qD1szHOhbZRTNj/QyOe1AY9+ePzUqePMCZQ8nF8ODlzVjQYjnpCjH:c5qD1sD2T3JAW3wL0ClFXDlzrIT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11d7e611193d429856828ba3e75f97fb

Files

11d7e611193d429856828ba3e75f97fb
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DivxDecode
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
hookoff
hookon

Sections

CODE
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ