971d8e946ffebcad46ae9e6bd5136a78 | Triage

Sharing

General

Target

971d8e946ffebcad46ae9e6bd5136a78
Size

120KB
MD5

971d8e946ffebcad46ae9e6bd5136a78
SHA1

475ce7d477eab7f19753245f73cf7698758e05f9
SHA256

0fffac373ac1c8d9eebe0da8b1c6fd3ef89f4678b5031c5ce00d0887b82c42b5
SHA512

86d013dfeae3a5518b821dc284ab1c700c9c7925e5ffd3d8f12f190ac915a13c6f915b284dd9ff4d78acaf20c2a7bc8f8dea8d960b4218039588aa3a1df2c45e
SSDEEP

1536:OisWRqut4KH8jSsrPFPE3YW7rdQJaBjS7bzEl6agoCMhtPCmNdBOu3Uv:OisWn47rN6YzOjS7cUvSnPCmcu32

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
971d8e946ffebcad46ae9e6bd5136a78

Files

971d8e946ffebcad46ae9e6bd5136a78
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fdsksd.pdb

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ