4121570ab1480562163972c217a9b8d7 | Triage

Sharing

General

Target

4121570ab1480562163972c217a9b8d7
Size

74KB
MD5

4121570ab1480562163972c217a9b8d7
SHA1

e2188c2e9a9e21f9b7ca60dbc62200c0a89b2711
SHA256

01ba233171543c3a78acd5493f4947ea149c323f5a5d2caab78122613bcd6c6e
SHA512

714e15906eb768cb52735ae65d505cc6f3046fc5811c9816ca32d5f91bad04716d4bef736733d80003ce09cacfe8172cc936bbc45cc8648310ed31fd6b21a7d8
SSDEEP

1536:ED+sAPJzxoXsc6n/AFL+URaT/S9U0DeaT8Etr/GMTnoEl:EYJzxcscC/EPq/wsaZ/uu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4121570ab1480562163972c217a9b8d7

Files

4121570ab1480562163972c217a9b8d7
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain
ThemeS�w�iceMain

Sections

CODE
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 66KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

aaa
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE