4214a33457e6361322b686fe44aecd34 | Triage

Sharing

General

Target

4214a33457e6361322b686fe44aecd34
Size

238KB
MD5

4214a33457e6361322b686fe44aecd34
SHA1

0a37ad356509fdafff7a78f899985da5dc79a4d4
SHA256

6679eca68a95ced06e14dd0642423684190625b42b50de00707e363a1f847e61
SHA512

0ae983f424288b70cee1ab9c9340a8e1f9078a6cd51d5844674737daea0e53d9743b958ac6b18dfb5531ee254d680443f979ae5dee4b78fadf6319b9fdf105a4
SSDEEP

6144:ZPz1XhyGpBGeG6bxKl+5NPj7zn2mMmOJ5Fon06tR7ICH:FKUB1vNL2Z5Sn/7IC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4214a33457e6361322b686fe44aecd34

Files

4214a33457e6361322b686fe44aecd34
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ConServerDllInitialization
UserServerDllInitialization
_UserSoundSentry
_UserTestTokenForInteractive

Sections

CODE
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ