39dea46c46c2e58e95a4870f1b5812d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39dea46c46c2e58e95a4870f1b5812d7
Size

120KB
MD5

39dea46c46c2e58e95a4870f1b5812d7
SHA1

ac8a6dc299f7e8dda32d874df7eff43363cd5fc6
SHA256

086e99e123eb63e5e213a560df842ac467e013fcef7d311ec9b15b127aa70c55
SHA512

7efbe9c89bba4c4c07427bfed2ad19e7b167422b6d9b3794262c2c9d8c7658bb9a3955a38885873f50d594d1d2193c584d451f8de962244b4fc64abee7a486a4
SSDEEP

3072:hZw65TIaU+AO+8mXAebcTgw8NC+XbgNY:s6IOaLbcTgw8N9Xbgm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39dea46c46c2e58e95a4870f1b5812d7

Files

39dea46c46c2e58e95a4870f1b5812d7
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ