71e8f42749a00a772a3291048a7c36da | Triage

Sharing

General

Target

71e8f42749a00a772a3291048a7c36da
Size

125KB
MD5

71e8f42749a00a772a3291048a7c36da
SHA1

6db994215b5742ef4982ae5719c20f37330d8509
SHA256

3f5ee4aaa8793adca637da887016e7a3b0b7435980d983cf178bee4885b391f5
SHA512

18be73e70bce29bf010798c8747f26d78125f26108b0fcce11c5713f11618bfc46ae602942a9bd3989765e730453cb6c46d0fcbb4b093b47d4fb1f74c1439b39
SSDEEP

1536:gX8dPX+EFWlWjf00Mkg2Atv5ro3B7UMvGr8cD28+VMW0qz+op3AGL0yqNbKxHUzp:KcgeItv50RACJp3AGL0yG69ChNQGeBy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71e8f42749a00a772a3291048a7c36da

Files

71e8f42749a00a772a3291048a7c36da
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

MedManager
sls

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ