ab1addef81a5468c8af8b399c9e8587a | Triage

Sharing

General

Target

ab1addef81a5468c8af8b399c9e8587a
Size

264KB
MD5

ab1addef81a5468c8af8b399c9e8587a
SHA1

5218c2eba5a8dd06aff3fb5adf9bb66142c24c31
SHA256

5c199d044f78f2576566b2c393f30904dae57b1d098c36a4dd5a9af16ae35eea
SHA512

624e46acef02f7a6cf21ecd95474b559092a065b535a8116180693c660c5b05c0bffae772589c23dae3ac7e2c8d9b20a1277f721cc4a85cd64e7ea5870ea7bd8
SSDEEP

3072:IPWVGh58DzF2CMm7b/xWgF1kh0w1FzuXi7s7Nl9zhEK4bl9thBS/AYP:CWVqQMCMmH/H1kh0w1wx7NlF47DBYAY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab1addef81a5468c8af8b399c9e8587a

Files

ab1addef81a5468c8af8b399c9e8587a
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

FMQSxQomrof_isupb
swstel_web_tecurepsnnc

Sections

.text
Size: 261KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ