fd0f6511f834ad11ca960a884dc1cec8ceed5aec660a3fd479d1de78e3400cd5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd0f6511f834ad11ca960a884dc1cec8ceed5aec660a3fd479d1de78e3400cd5
Size

42KB
MD5

d4f634bcf0654e46bf67356924e60416
SHA1

f01bcb8314ab4234a0933bdef9f0645ff2d9465b
SHA256

fd0f6511f834ad11ca960a884dc1cec8ceed5aec660a3fd479d1de78e3400cd5
SHA512

beae905b11fb8f0cf84aa359ef8e23301449dcd6a598f60cd6920fb3e9adf5feb856ef4003c11fce4e15fb48affc0bb2dd550c107a0356ea30e9d51a52fc1cd4
SSDEEP

768:kC5q5QAwOEc4N40j6u64L499pToGXWwMdP4UBrA4WwUvR0t3:z5q5QvcQPGuJoTZCgUivvRM3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd0f6511f834ad11ca960a884dc1cec8ceed5aec660a3fd479d1de78e3400cd5

Files

fd0f6511f834ad11ca960a884dc1cec8ceed5aec660a3fd479d1de78e3400cd5
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

BTMEMO

Sections

CODE
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ