99311a27edcaec6d0e5ddf529a5f96b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99311a27edcaec6d0e5ddf529a5f96b9
Size

116KB
MD5

99311a27edcaec6d0e5ddf529a5f96b9
SHA1

090dc1dc70bb7a12618f32e023ecfe0f86ece540
SHA256

03bdc4e417bdf1f93c5305062f68751c79a9af1c07ceba4e5ea6358e766213d0
SHA512

60d73dffc5933a00be41df2668169cb7f3e76cac70e48b6f33a05ddea0780b81b0e8809490b629f58e3ee4e59cecb0fd01713d55dc6bd1065de63fb945bed539
SSDEEP

3072:Al2KhQRVuSOSrxQR+BY82w84bOHAFCrhU3pJua:EQRR11iw8GOHAF6gpT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99311a27edcaec6d0e5ddf529a5f96b9

Files

99311a27edcaec6d0e5ddf529a5f96b9
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fdsksd.pdb

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ