19045e7762ef92a491ed6d7d07f2d950 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19045e7762ef92a491ed6d7d07f2d950
Size

40KB
MD5

19045e7762ef92a491ed6d7d07f2d950
SHA1

dbb9d58489b051eb6a37f647723602d710415876
SHA256

47ad2d9e07059fb575ffdb11c7651d4280c90528cfd8e2207156bf9d05d8b896
SHA512

cd6ba9ba31f6dbe7c302edf1f45258c13ac2b946f9f24e676f29eadba4b890cd8edb948a8aee5e0ac604fe5a3685c4c8d4effdd35eddd4cd96b579f66e6f3247
SSDEEP

768:ULLUeXVFCd81WxaSQN2sHYWZXJ/Afw/LGv:U/UeX6a82NHYWZ5/MWu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19045e7762ef92a491ed6d7d07f2d950

Files

19045e7762ef92a491ed6d7d07f2d950
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DriverProc
init
modMessage
modmCallback

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ