b4acabff00b0a292fa98c32ea62d2b19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4acabff00b0a292fa98c32ea62d2b19
Size

19KB
MD5

b4acabff00b0a292fa98c32ea62d2b19
SHA1

cc6d9c48c89fdb67d84d5a06b8b35cf13138060f
SHA256

b871c1fde4a16cb72c7ea950de136fada233e5958af6aadcd824932b32b9784c
SHA512

f99cd6a63a147b288f804468677b43f971f7f7a4bbce5a93ea3cae1d9c7de35e1ea8fcee4cedf20a59d88414557d234aa33dd8d8e65cee771dfe58d31fe4381b
SSDEEP

384:ylv4YiKEjcYXmmDP5Eiz4vs9ORqR6RhRKR9+R++RyRT:CATKEjNxbkvxwkXAuVo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4acabff00b0a292fa98c32ea62d2b19

Files

b4acabff00b0a292fa98c32ea62d2b19
.dll .wsf windows:5 windows x86 arch:x86 polyglot

79b3362178937bf9559741c46bb9e035

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ