5905f63c0dda4812b985f60029877916 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5905f63c0dda4812b985f60029877916
Size

314KB
MD5

5905f63c0dda4812b985f60029877916
SHA1

a388f51971c44b37f04f6852a65daaa78f5bcda1
SHA256

33a8dcfbdd5977279feae0b46a37f8795ff8d6e4e730492949045898fca77a5d
SHA512

933f9e8e13cc617ab0256c377a0327e53f1b30d0c4004e21eab44c8d9339f521bb40e2fe5731f97716a0db0c2421942a44c41d21d8dabe51eab8be9b64f58d62
SSDEEP

6144:7l4GvjUW14f0cFiPzsI7TyXWqFIOHzt+vK5HyP0u7kl:7lXLU2cFOzF/qHiKs1q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5905f63c0dda4812b985f60029877916

Files

5905f63c0dda4812b985f60029877916
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

LogDebugEvent
LogSetup
LogUserEvent

Sections

CODE
Size: 262KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ