51b8def53ce93f47490070d6973faf6b | Triage

Sharing

General

Target

51b8def53ce93f47490070d6973faf6b
Size

65KB
MD5

51b8def53ce93f47490070d6973faf6b
SHA1

9f5ba26bd7f06f39bdfafc6a64416301987c8a09
SHA256

fad422bd512c4f83baad522681ad32615887e1286526332d6cd7151728f294f6
SHA512

8f07e05b54953d0e741435931076f1ef36c5813d8ad091200daf9a5e172ffd26af621d9e2b1e855c8344713300162e387a16c8c09a6ec9d8f4bbbd4ea7f0a2b2
SSDEEP

1536:npqcLXQNHGqQy3iVUi6lOLaFS/Z83V8Gx:7jg7QjVUigR8C2Gx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51b8def53ce93f47490070d6973faf6b

Files

51b8def53ce93f47490070d6973faf6b
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

WSPStartup

Sections

CODE
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 18KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ