5356160d4538aed1ae24a9411b1d2aa9 | Triage

Sharing

General

Target

5356160d4538aed1ae24a9411b1d2aa9
Size

150KB
MD5

5356160d4538aed1ae24a9411b1d2aa9
SHA1

56cadf69a6d9e160b78b5d95122ef3e3f0610d31
SHA256

61c24d058c403ec211e3bc12e8ba9fe325bf98f4c5848d5e7941a2aeea9e2ce3
SHA512

a38703d82b5d2828aef2d207b63d07e71786730c0b84b5da176054c6a2e7b11f43040097ce9ed0f0ced1f022eba92d596991a347898c4d2a686336ea94d55282
SSDEEP

3072:sgHzsY1uxHQmWnNG3wgKqwJ9SXaXVMDRH:swIpxHQmWnRqw+XaXV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5356160d4538aed1ae24a9411b1d2aa9

Files

5356160d4538aed1ae24a9411b1d2aa9
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

FsExecuteFile
FsExtractCustomIcon
FsFindClose
FsFindFirst
FsFindNext
FsGetDefRootName
FsGetFile
FsInit
FsPutFile

Sections

CODE
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ