527a423d426d362e15d097b624053c4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

527a423d426d362e15d097b624053c4c
Size

11KB
MD5

527a423d426d362e15d097b624053c4c
SHA1

81b8d77cd4f3b354554564149d541078a9fd9594
SHA256

5bbeaa5a361dff74d11c14a5ed42dd7e5a335ff000bdc61bae6f99f0451474cc
SHA512

eae6671d65e39c5238f6d5bcbebef09634c550aea5489d07bea145c259abee4d919252b9a88abe4ab9d598abb4b3e06ebf5678a837eb8de704ef235af55438c5
SSDEEP

192:nmwJiOQ89r0H117+3hfvMsZGXAwUJWaiZ:l4O5p0m3FGPU8hZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
527a423d426d362e15d097b624053c4c

Files

527a423d426d362e15d097b624053c4c
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

saglanmis

Sections

CODE
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 177B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ