a066d64b1eb6d293141c6343bb043d27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a066d64b1eb6d293141c6343bb043d27
Size

26KB
MD5

a066d64b1eb6d293141c6343bb043d27
SHA1

f2caaaa9adc8c60d676e74bfa4023d88336b11ad
SHA256

0dac2bec2f1e8cbe5717620e4d2fb6b8759c191bf0431d11517bdc09b31e9647
SHA512

148de87197574449cc564b11e2537b81fc09bf0c70d2b6b855aab9d45ca25c91cdf8bf7b00d143f1ba89efae27e93a37260cc87df36a9b86cacaceb73a204bc3
SSDEEP

768:erFRiIa6S6c/wrdexkBL1kcVOyvMQdrhtwFL:erDhE/wukc87XdVKFL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a066d64b1eb6d293141c6343bb043d27

Files

a066d64b1eb6d293141c6343bb043d27
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@16

Sections

.Upack
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE