7b88d22a399e6491a0e63159dd4d3bf9 | Triage

Sharing

General

Target

7b88d22a399e6491a0e63159dd4d3bf9
Size

153KB
MD5

7b88d22a399e6491a0e63159dd4d3bf9
SHA1

f32a30fba614514a4ee308c27fd0aab3e606ad12
SHA256

a89cc4e73b1acc07a0ae7bc86da6d31ad6c19d80b5914ae5a5eac6e4ac92f113
SHA512

e773ab21d22cb6f5cc05293ce7f5c1edc43606ede46acd2040627cf0d67059c7f407866f7a0c7ef012e46c95eb894e5ce0b1234bbd7ad46528a7b56825e58cb4
SSDEEP

3072:E3FGaH4ue4MLajTYESgRmXR1dTxfhiechC7/8xkV4czUD:E3FGaH4a7jkE1RmXxTxfhiechS/8xkVW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b88d22a399e6491a0e63159dd4d3bf9

Files

7b88d22a399e6491a0e63159dd4d3bf9
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

MainService
MainWork
ServiceMain

Sections

CODE
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

NewSec
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE