b4fa136bb6075b85d20c1fa6bb4a9dcf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4fa136bb6075b85d20c1fa6bb4a9dcf
Size

679KB
MD5

b4fa136bb6075b85d20c1fa6bb4a9dcf
SHA1

c8dac02404b332d291f6c81713caff0b429a6681
SHA256

d2918a159bb13e472f040f1a39b36997e6e4e6f24a775078d9bd2f1ba39c40cc
SHA512

1e2639c7342c758e8dd62750eec5e7bc0140fe3f2213f0982b3b4cd65a865b9094eb96c762698babe8df40d3093994d4bbaa154c2e84d2dae66f0095a79fba71
SSDEEP

12288:tG3AiL2IOrpIxKIRMq4DoVN78ZYkZNj0LHBVN4hU:oQe4JIRd4aCf7oeU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4fa136bb6075b85d20c1fa6bb4a9dcf

Files

b4fa136bb6075b85d20c1fa6bb4a9dcf
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 499KB - Virtual size: 499KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 78B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ