879a306e66e69b1f9143412ce1786bb1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

879a306e66e69b1f9143412ce1786bb1
Size

18KB
MD5

879a306e66e69b1f9143412ce1786bb1
SHA1

223fc900b40ec9a46fb219cbd1ebcd4c37cf3828
SHA256

df610b40abec922d89a0a3904a6d1a00bf99cd62251e16cd40d495ddd257a890
SHA512

b09bc57c756b31c6adbc7c374b4c62985e5f8cb665d9c8775c516c25ce90fe268da707b002cca927d67907d49167eb28d5f42a8ed1f98fb9ae5f1f49e21a3bfb
SSDEEP

384:4RdCyiYMqlWjDmQq8uNOdA4JUw2Kq3zAzdeTW:sCycqlUDmQYF4J+Z38d0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
879a306e66e69b1f9143412ce1786bb1

Files

879a306e66e69b1f9143412ce1786bb1
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ