13a0609e4f166a6266894e334778af9f59cfdbbb9998ffe948778f23ddd68344 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13a0609e4f166a6266894e334778af9f59cfdbbb9998ffe948778f23ddd68344
Size

55KB
MD5

404c2e5708be54e24a2a6883adaa864f
SHA1

079d4326d22fd05c6520070bcf3c3b9ebb4c335b
SHA256

13a0609e4f166a6266894e334778af9f59cfdbbb9998ffe948778f23ddd68344
SHA512

34ab354b1c7deba378ba48e53cc1eddbb3a5609ee2751dea0da42f03d8e46c874b743f38212dcaa772ada950dc4fe6eaf234543f2346e7d67b49d7f4015c7b1d
SSDEEP

1536:g++mIpcQnCyfVIzFGMXRXe8Wvh9wnFwQg:gLmMv9YJhOtqnFA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13a0609e4f166a6266894e334778af9f59cfdbbb9998ffe948778f23ddd68344

Files

13a0609e4f166a6266894e334778af9f59cfdbbb9998ffe948778f23ddd68344
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ