51048bd04d52275f3933137ea3321538 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51048bd04d52275f3933137ea3321538
Size

526KB
MD5

51048bd04d52275f3933137ea3321538
SHA1

4fe4134f1794879ea1ea223508482555d27d047e
SHA256

5e5b7823bb0ac994e6059772f0fc686fe8f7e916b9cd47de40d0fd6ea16791e5
SHA512

ec95bd60320c0e0b5747f03462f2c7bc8e21b5da633476b8e61af1a6f13dd39524304b3bff7ccaa10fae3a50bbb5db7e1b0b4c2cb60a026c5162387bc03d2dde
SSDEEP

12288:4JFtyyPBEmdnAGmJ9dFavkNv2P2cTtAO:471EaXmFFacNv2OcTq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51048bd04d52275f3933137ea3321538

Files

51048bd04d52275f3933137ea3321538
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 443KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ