998a32f4777cbcd47fb384b667ca6411 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

998a32f4777cbcd47fb384b667ca6411
Size

106KB
MD5

998a32f4777cbcd47fb384b667ca6411
SHA1

d39afd79bfc51757b846d0ceb22f8b72ae34d5c1
SHA256

71fccc3829b4e6cd0f8e1d13c86863be69e556088cc19cd7a4d1b0672ad55e7f
SHA512

48e7531779c4215a92ef8f6fc631abb4b95d62ba4e1144de5deeb5e6ea9797c5b666c24111f0367ce90c4dc36d2f90c26fd6f6660da64f86afd95efce6038f65
SSDEEP

1536:kjWsawWtjJTwSszbiHAWdm8YADIO2lnToIfvA+p:c+JTQOdU8Ys2NTBfvbp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
998a32f4777cbcd47fb384b667ca6411

Files

998a32f4777cbcd47fb384b667ca6411
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ