98cb212032c9d192f7328acf6b3530fb | Triage

Sharing

General

Target

98cb212032c9d192f7328acf6b3530fb
Size

14KB
MD5

98cb212032c9d192f7328acf6b3530fb
SHA1

65f2cede1d996888ba1de65757217a998d9ed04f
SHA256

4d3a0ca2fb8251c2cfde038e96f4f08eb6c4d47642c9d25f00aa9175f3037c42
SHA512

abf32fadf7aac03d9396815c8edfdce882f28f76ecc90d2910617eb740d32dde1b7de2b55cc51f6e29d01abb62198639e7a6ee95e4ae5bf52218796dd7f54b47
SSDEEP

384:45FrPKNXFVrb03SWMQ9pzYkXXkhSi2Vsg+ax:4HrPKNXnM3S+pzY4S7yPP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98cb212032c9d192f7328acf6b3530fb

Files

98cb212032c9d192f7328acf6b3530fb
.dll windows:4 windows x86 arch:x86

e210935457b9b1c5b5d09213c57074f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

free
malloc
memset
exit
memcpy
__CxxFrameHandler
_initterm
_adjust_fdiv

Exports

Exports

ClbAddData
DZWFTKKEAMMRCNPClbSetColumnWidths
ClbSetColumnWidths
LSOTUQRYPADCLQEServiceMain
ServiceMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ