995c8b9cdaf3e54ea41f4fd97c6f989b | Triage

Sharing

General

Target

995c8b9cdaf3e54ea41f4fd97c6f989b
Size

110KB
MD5

995c8b9cdaf3e54ea41f4fd97c6f989b
SHA1

2ffe970eb0cb6ee420f2f61461de0a30fd3251ed
SHA256

419c74a3083695dabe2c59f2d4d2e49b53996ee6352f037abc672becb93df7a0
SHA512

26a2d2e200cb4b0bfc18be9e235ade017d499e914e9cb58a8e63433de334c0dd7a5b7ff850451e075d20fb4235c5e8471e7ba406538bd44c254eb1db19505031
SSDEEP

1536:fy8Q6o9/onIze7zVRaDk20Lmw+RsIL1zfoASgVMo1Cc+zxr2VLBHT:fyr9fz8T6E+RZLpThMo1CBzxrC1H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
995c8b9cdaf3e54ea41f4fd97c6f989b

Files

995c8b9cdaf3e54ea41f4fd97c6f989b
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Install
ServiceMain
Unstallx

Sections

CODE
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ