1393b334a190b17d41d55c906c5449ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1393b334a190b17d41d55c906c5449ec
Size

116KB
MD5

1393b334a190b17d41d55c906c5449ec
SHA1

5198bddb9048ea832497f72ca59b00177548c845
SHA256

da24d8f131518448d70cd87a21b7b80704494c7898c7565c741e6f43a86d2032
SHA512

2d59bbcf486b7f921824832bc021e7cfa1de6d6e139640e8f1d48de07404c2d30403dd84daada4b1a1b026e09f018c4086c01368e3e1991cc105deb7cb0c4fb8
SSDEEP

3072:a2LJayadgKeMDfOBHEhlmVTAYjdYJflCCRSWC3mBdB:a2VaDglMDfpilJmZlCIRBn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1393b334a190b17d41d55c906c5449ec

Files

1393b334a190b17d41d55c906c5449ec
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ