b4ddf4c63bbe590c764193ee005d51db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4ddf4c63bbe590c764193ee005d51db
Size

229KB
MD5

b4ddf4c63bbe590c764193ee005d51db
SHA1

52a2d21c50802884fe2dd8369f578f1cdb0b4530
SHA256

aa511ecde71e62a9b189f79c7b0b614e76e211737bd43369bb6c540236b4458b
SHA512

493470292e90afb6fc2c2c28b4f2ef8263fd3f98852f338ce2fc2784767fa36e54e3a5ebf7c66ddc975b606fee4538127ed6d4b1903aa1856e5d336311b4f73a
SSDEEP

3072:wbCD1jQOpLf1KOsFHRLqNidNcNDdL9WiwL/9GfKmtcZ+gIaP3t:UCkLRLHm5L96lGyNfd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4ddf4c63bbe590c764193ee005d51db

Files

b4ddf4c63bbe590c764193ee005d51db
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fyyzm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE