c222e301e84458e85494a41160ba167c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c222e301e84458e85494a41160ba167c
Size

71KB
MD5

c222e301e84458e85494a41160ba167c
SHA1

6fa9e7f95acd3f0fe7b6c730c9c710cc603e64ef
SHA256

51d8a4c5b03761b7a9889c1b9336f8b9732660a6bb0acb90a6630850b933591d
SHA512

5bd079a495b9b6a6ccb1a974ad4a1161dd563f39df2b5e93fa7dbdb3623a9c0d13ac177549bacd99d36f151d07333c24bb958f11b380b52e77d4c84dc6b742c7
SSDEEP

1536:qpWq+bGtGi5i7hkw0GD4nZvXtkVXikHng9:tb85i7awHD4ZvXabg9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c222e301e84458e85494a41160ba167c

Files

c222e301e84458e85494a41160ba167c
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

notification
plugind
pluginreply
pluginu
serverthread
write

Sections

CODE
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 77KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ