5b11f3170ea14d5e92c1c60ea5c1f4c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b11f3170ea14d5e92c1c60ea5c1f4c7
Size

673KB
MD5

5b11f3170ea14d5e92c1c60ea5c1f4c7
SHA1

2edc10b9225ebf875f4d73805a85312fd6222487
SHA256

e85557964af16a952fcb015f33da492ce6679c1aa5ecd15360f4ba07b8c1ad11
SHA512

f4f64aa36951e5281d91a216c7d575e3a583caef9b337c7900e6d36601dbe4d627f9bb94794fb9fdc39bf6d30287acc5d1f7dddf92e03907a24d58d8f8bd4e9a
SSDEEP

12288:nXOPR+r369Mbh+mpJDU9FXkraH4DTpTvYbXXW/Flkh:nwRhIho95aUbmFo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b11f3170ea14d5e92c1c60ea5c1f4c7

Files

5b11f3170ea14d5e92c1c60ea5c1f4c7
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CheckReturnOk
MessageHandles

Sections

CODE
Size: 539KB - Virtual size: 539KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ