5b6a9bd4de492927ecd36633851c97af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b6a9bd4de492927ecd36633851c97af
Size

104KB
MD5

5b6a9bd4de492927ecd36633851c97af
SHA1

e7494ef3bfa54c3a4ae1d7f62178e6701e1e4913
SHA256

46e06adba9e6efe225e4b22b623bfe78f4d412bd7417dd77bb3d655c2196351f
SHA512

51bcc7e204d8f0cde3e7263d2b40598d318542ad6cb5b818264b58f5156a1f0c389b598db35350e090d1d13ee1dd592646ce28482e4f8b0321824b4d113fe256
SSDEEP

1536:/P0ZQ3xawGfOcnJ/n811z4BjucXr9FEV6R8qr/WAH33T:308IwFWJ/870BGVy8qr/WAH33T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b6a9bd4de492927ecd36633851c97af

Files

5b6a9bd4de492927ecd36633851c97af
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ServiceMain
Qy001Service
Qy001DoMainWssk

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tyhju
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fgthy
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.mackt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE