71159b7f9a089b5ff1aeabb546075570 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71159b7f9a089b5ff1aeabb546075570
Size

260KB
MD5

71159b7f9a089b5ff1aeabb546075570
SHA1

8c44e5e7645d41797644bb86c7d58e7c8ae736dc
SHA256

6dca0f94962a8b116da697f93566c3a034ab20528974f90e3225d8c5867a9e2b
SHA512

63aac19ba35cc8dba08f6ad82a3b7a193aeaacc4491a7d75c5b7af65a9335e749dcd511fb3a75332e7786511866c61bb4b1fd3e35c32b68c5fcec5610facc9c1
SSDEEP

6144:9pXCxk6KtjLXDlYXr/nZ3zquHgsOz86ca+Gsd4xzQfvN:9NC6tsPBdgsO3ca+G20z4N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71159b7f9a089b5ff1aeabb546075570

Files

71159b7f9a089b5ff1aeabb546075570
.dll windows:4 windows x86 arch:x86

4fce4492049883e37a9895a795f6afda

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr71

free
_CIasin
_initterm
_adjust_fdiv
_CIpow
_except_handler3
__dllonexit
_onexit
__CppXcptFilter
malloc

kernel32

DisableThreadLibraryCalls

Exports

Exports

faacEncClose
faacEncEncode
faacEncGetCurrentConfiguration
faacEncOpen
faacEncSetConfiguration

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE