4348514fd1179ef8ab55419386ac9d41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4348514fd1179ef8ab55419386ac9d41
Size

259KB
MD5

4348514fd1179ef8ab55419386ac9d41
SHA1

f4cccc3be23e218e6e6c152e883a6b7f8d9de568
SHA256

7da7a184142899282f2f2eaf07079048f1853e9f35d0afe5eaa0bde1a62903fb
SHA512

8ae72418d298facc56d5860b10cf3f46be4fe612ea8b8e08c951956866d39ab68ccd4a0d888c020c443959f7054847d1c1d2ce8b69ca5aba2a71822d5f0f4881
SSDEEP

3072:T0CaiaaB5B866tE2p9xHtvdlnro4lPLkM4OdpUoBAMP9vgpf2xIqudkQjSsj7uKI:QCt5BGh0kyozPNEeIqAp7e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4348514fd1179ef8ab55419386ac9d41

Files

4348514fd1179ef8ab55419386ac9d41
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

OnLogon
OnShutdown

Sections

CODE
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ