70f1140ad63e80f1bc9c531b12110973 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70f1140ad63e80f1bc9c531b12110973
Size

9KB
MD5

70f1140ad63e80f1bc9c531b12110973
SHA1

819e393001aa4624f4fda876c9c17505280138a9
SHA256

db4dd23492d48f5e9ebb5c2c02232601f80e90f78df35ff3805b3a4313fda9ab
SHA512

5e561b84ab96ce17dfe1ca7b904fd1749a0108ea8984e7a072656711546fdf3060656cfb354e2f9abd9a034671fc821bb1de8d9236e19ac3f6eba5d5f70e3d07
SSDEEP

192:uOZurdSVb+6ld84UoedGB0GXG9omaYHmcZBVOsK:uU79pd841ESFmaYHmwC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70f1140ad63e80f1bc9c531b12110973

Files

70f1140ad63e80f1bc9c531b12110973
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

WLEventLogoff
WLEventLogon

Sections

Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE