548ac7d84eb6ca0a4dc54ec3b55cfe5c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

548ac7d84eb6ca0a4dc54ec3b55cfe5c
Size

117KB
MD5

548ac7d84eb6ca0a4dc54ec3b55cfe5c
SHA1

2140e04e73474f2404b343162c0392e38d5fe2c4
SHA256

f4a27498ee61dd7db443a351395d2076ff6944399812584f8e24b84ad0d5299c
SHA512

9a8fd4ba2d9707e407727ef404205bf59a898a350cae4f0f4be60f36fee578ff4b7547c900a0ae5f0903b0175e3c804d8ddeb215f3b8ccbad4ab3d83da603e6c
SSDEEP

1536:r/07PMcgCmIxKOocuI/JqLM0vmFCg4K4tHOhr/nILfjwdPoYgwC:rM7P03oaqJqLM0RK4BYR6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
548ac7d84eb6ca0a4dc54ec3b55cfe5c

Files

548ac7d84eb6ca0a4dc54ec3b55cfe5c
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DoMainWork
DoService
ServiceMain

Sections

.miss
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dosdt
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bbsd
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.musd
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.smdaa
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.Neroxps
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rukou.
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.surub
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_smdaa
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE