7d13a905ae379d64925234190e6d6e08 | Triage

Sharing

General

Target

7d13a905ae379d64925234190e6d6e08
Size

385KB
MD5

7d13a905ae379d64925234190e6d6e08
SHA1

bddaad1fb7978ec386c70e56539b24eba691521a
SHA256

d0f00e24c700d8730f93286831d0f7f27c441d317a6288271eb7fec25792ba96
SHA512

7b83bd69f06b58be623feaa0cc235fedbac2835621fe45d450acb0f3a1fd216d354135075155f0a16d6658743f14fb5639d25a892aa65d14d4fa63020cf8c202
SSDEEP

6144:LCUhoDRL+MO+CpdG2LpCa6dioytdmcDAWgdwBiGD5JeQN2DrWxl:QD4MO+CpdGByPmcadGtxN2HW/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d13a905ae379d64925234190e6d6e08

Files

7d13a905ae379d64925234190e6d6e08
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Author
Connect
Disconnect
PluginName
RecvData
ShowClientWindow
Version

Sections

CODE
Size: 325KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ