879a39ac0b0be02ceb94fd0b3e97adc1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

879a39ac0b0be02ceb94fd0b3e97adc1
Size

124KB
MD5

879a39ac0b0be02ceb94fd0b3e97adc1
SHA1

618396d3290e3fc8071031f4f4d22f97eee32b35
SHA256

723ee37df2bef2329273720e6edc8be49290325b8431d2748d52fa97f8fdd56e
SHA512

173c55bd70cab1f21746f056de9f613f6ec82272b310d54ec2a6987d45c27aef761ca4b1aa19501e54d7742a07539b10e3354c46e7b3a4c4e90ae9dfe8790a54
SSDEEP

3072:ymHbLOuJcW7wYfh58FkwZOvtl/rrwDoQ4y:N7LBJ/wyAFkww/r0DoQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
879a39ac0b0be02ceb94fd0b3e97adc1

Files

879a39ac0b0be02ceb94fd0b3e97adc1
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain
neishei
neishei1

Sections

CODE
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ