4b0c9ae2dbc8f3dc10741da9f8676db2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b0c9ae2dbc8f3dc10741da9f8676db2
Size

93KB
MD5

4b0c9ae2dbc8f3dc10741da9f8676db2
SHA1

bc9234c9192ec761cb40031848d8c6318546e337
SHA256

e777a6e3fbde215feb247db3da38c0575248a3d5a97366a74787aae99444865a
SHA512

4a8bd3a12a549c428a77991675068bb9ed01a0baa369258c0b0ceada9e72853dff682d13f2a46f9435b4b31aadbb689f610fbfdbc9b7d780d8bd7ce4fbbd9ada
SSDEEP

1536:5yjbZcgCPIBQOicuI/dg/ZoqPsuj4QfGjOpr/nX1MBRoYNU+N+s:4jbXKCoqdg/ZBEQf9MBrJQs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b0c9ae2dbc8f3dc10741da9f8676db2

Files

4b0c9ae2dbc8f3dc10741da9f8676db2
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ServiceMain
DoService
DoMainWork

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Share
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ