6fb13fce9e561854381c2a0490fc13c0 | Triage

Sharing

General

Target

6fb13fce9e561854381c2a0490fc13c0
Size

497KB
MD5

6fb13fce9e561854381c2a0490fc13c0
SHA1

ce0cb164e70bc5e7f9c809f753517eba633f6af2
SHA256

48a88cdda4b5edb8241ecef99c33d254d768cec9f78dca30c7f076c97e8d6eeb
SHA512

df277b8b2c2704af6e7ec211502084c73c70aa2e5d42bafd91357728faef928bae3611cb07034749a029452728e5bba955e9b59a2d559c5529e70cbdbdcf3adb
SSDEEP

6144:XzBOaOLCK0RYhvNZtXjTCdN/61IS9ee7Dq/22eMZ20K7LD3NvAWRvKedg:FOaOLz0RY3WO1jeenvUREKQ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fb13fce9e561854381c2a0490fc13c0

Files

6fb13fce9e561854381c2a0490fc13c0
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 427KB - Virtual size: 426KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ