4ab0bb583fab399bf281f507565da57b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ab0bb583fab399bf281f507565da57b
Size

85KB
MD5

4ab0bb583fab399bf281f507565da57b
SHA1

fb3e145ee46940dbd899fedf2618065a971ca741
SHA256

40dcee842b839aaf8cef4807495bbbf173e5aa5b94a6b47531405bcc40560d7e
SHA512

8f0e678514f7963efeb04c8c21f6f820d2cdc26cbaabc56022c58e5fc7d5d863d3ba7fc55470d9c60ffd1d19251a5cb0613256e5de8191201559ab9d1b62fba9
SSDEEP

768:2n5ici8Y2QOC1mo3C9DBRuhzFkGDZJ9wnn8R3q4rNTfuwP2iACgR+1mVaFmnvaAr:ePjZQ3xawGfOcnJa881Xz4BjucXr1p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ab0bb583fab399bf281f507565da57b

Files

4ab0bb583fab399bf281f507565da57b
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

LIngdService
ServiceMain
LIngdDoMainWssk

Sections

.LING
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.LINGDU
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LING
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LINGD
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LINGDU
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ