a19d7bee6d1825fac6a5cbcf139e93f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a19d7bee6d1825fac6a5cbcf139e93f9
Size

96KB
MD5

a19d7bee6d1825fac6a5cbcf139e93f9
SHA1

8167d92ce565fb2bb4e300299fef4a10c5e52987
SHA256

aea3b194c05bd00b3098c0f340297e158c7f82d7d2c93bc81a58bfb80a46026e
SHA512

1c45cc6992cedcb39ccfd4ec1d787834b2ffd5d364315f03a640a035da2b60f0379df9e21b4729891d5405b1638a22a3398e9ac73829b5552bcea59658653db2
SSDEEP

1536:kSuFLOnTIQTiOobuM03cx7M1b4goNFKrGK9+VVHWUsmAa/BrzUA:GFLHQfTd3cx68glU4a/BrzUA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a19d7bee6d1825fac6a5cbcf139e93f9

Files

a19d7bee6d1825fac6a5cbcf139e93f9
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ServiceMain
Service88
Mainabcd88

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

grhji
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gfrth
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE