b4645340dabf79aa01bd133fdcdec64d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4645340dabf79aa01bd133fdcdec64d
Size

118KB
MD5

b4645340dabf79aa01bd133fdcdec64d
SHA1

bbb310aec570dc8620c4cab1571afa30c13cd05c
SHA256

e8df070a2d5e5df33f4b33d85ab30ea68549537bd7a14e8f393ab50f203340b0
SHA512

4fde6d774f8ce65678c9932b55924ba0e4fcb86a5b92e86494453f3d93e37740bd1fb152cadba1320b41077374ba780a6ac17248a8677719e513691970a7c7d1
SSDEEP

3072:Q4JUn2SWlA4R86uTxuK4f0aJiLoYaMrS3/ers9jVF:DWn2SWlA45uTZ1LvzrS3cs9jz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4645340dabf79aa01bd133fdcdec64d

Files

b4645340dabf79aa01bd133fdcdec64d
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Entry0
InitEn0

Sections

CODE
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ