b59b49d8a96a2adc4d973b003bb776f8 | Triage

Sharing

General

Target

b59b49d8a96a2adc4d973b003bb776f8
Size

19KB
MD5

b59b49d8a96a2adc4d973b003bb776f8
SHA1

05242f6bd565372f58a2fc53dbc2eb3cade5f2da
SHA256

7a43bea04c644202024583777e8be0bd5951a43e997f3d26a4ff82f74a6db353
SHA512

203e00beb711fabf618fdfd705e8a427f403bdfdea49fee10b18daef2f78ad60e02c1e0676e1efad28d3b9fca9de57bfc6b4f8cac195d22972772c79c181088b
SSDEEP

384:1iyFOfi6js6uD49wJMATOHXDlwtvPV6LLInJtAQe/fHweW:1isL6jsHMJkOHzI3caJtA//o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b59b49d8a96a2adc4d973b003bb776f8

Files

b59b49d8a96a2adc4d973b003bb776f8
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ZtGame_IN
ZtGame_OUT

Sections

.code
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE