2904a40b25ccad97b80a50f74b72a9ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2904a40b25ccad97b80a50f74b72a9ca
Size

80KB
MD5

2904a40b25ccad97b80a50f74b72a9ca
SHA1

8365d9c866ffa7c9f4c69076f9fc0b67dd46bb55
SHA256

77fee8d5eacde038ed3b86df52f19b6048f4774d67d39a5c89546cdd6ce50edc
SHA512

2a88b50aa96049f10961fdfed2290a4c9ed1a8c3b6cda953c4e50f1b6abf607868e4365885cbf7f5b6062472713f2522ff53a1df0b117010c94a148ffafd6c12
SSDEEP

1536:dQkjhWGpj0v4SDh3qizTP+9ArilZW4gwus1K8/:libySwus1K8/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2904a40b25ccad97b80a50f74b72a9ca

Files

2904a40b25ccad97b80a50f74b72a9ca
.dll .js windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ