5a89a75db324efe428865925972e4604 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a89a75db324efe428865925972e4604
Size

128KB
MD5

5a89a75db324efe428865925972e4604
SHA1

aba622af913b3e722d259a8213b9a71736aa8175
SHA256

96ff457e0a2ddc1d5fc7ee1c90fa55b18a4251784e4a7fab4a9eb549b4a8d81f
SHA512

682b280a51175054e36f131f2458c99a6841437b390ebc8783ff021ff51a144643dea0704e0a3d59921560661ee8d32048b5471c0ae6f2a4f9ff8fc8fedf82cb
SSDEEP

3072:hyobqRDHI6sYaFREidoCoz/775LxM8NUSyn9jSvbM0Ztc:cob0HzFafEieCoDViJSTzc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a89a75db324efe428865925972e4604

Files

5a89a75db324efe428865925972e4604
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ