4299a2b13cb244208d20cd00fb0c085e | Triage

Sharing

General

Target

4299a2b13cb244208d20cd00fb0c085e
Size

151KB
MD5

4299a2b13cb244208d20cd00fb0c085e
SHA1

382d193df7cdbbac4d892b38904e86cfe5e5064b
SHA256

f004f135b88fe865a412687ce9d462d32828adc6a2092dffbe4a8fee59b7219a
SHA512

a672b931cffad020de40da6e4813027d703354566b2c396e495bc7a7a4a48b155b3426fa6b300bc991458551223a5d1e49c5679d38d2447d6ce9db54548ae984
SSDEEP

3072:y7R3stxOxwEAYXpuEWNhKum/GRJcKoam/jNKIkCv+3:y7R3sbOqEAYX8/hKu7RJA/jNKIBm3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4299a2b13cb244208d20cd00fb0c085e

Files

4299a2b13cb244208d20cd00fb0c085e
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DoMainService
MainService
MainWork
ServiceMain

Sections

CODE
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ