45ef71f709442dc1ef1d7f45ae223e30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45ef71f709442dc1ef1d7f45ae223e30
Size

37KB
MD5

45ef71f709442dc1ef1d7f45ae223e30
SHA1

0b83a608efb31066cd631595f4bb1d9bd220153c
SHA256

5ba6942d005d06dbab4c2d36c97e0d649cf80a2356d0c9e16ca4953be23b4020
SHA512

a0321fed06efc72251b2e4fbbaa9dd148e0e7e11d093a220b57a371840483471d50e1098948a42471162d9354c2db164aa1edc943a0c1b517df9a3bc7d03d036
SSDEEP

768:K9jYlrbVk55U/idEqL0dYcZbtkdzGkJac6IgOWy1vZ54U:MjYpQ6/diKXtkdzdgaWkeU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45ef71f709442dc1ef1d7f45ae223e30

Files

45ef71f709442dc1ef1d7f45ae223e30
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

WlLogoffEvent
WlLogonEvent
WlPostShellEvent
WlStartShellEvent
WlStartupEvent

Sections

CODE
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ