ca446a07bcceb9c1f4c399b494d54140 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca446a07bcceb9c1f4c399b494d54140
Size

34KB
MD5

ca446a07bcceb9c1f4c399b494d54140
SHA1

9710182c0c1cba8621f7af0459fb0889569ab79d
SHA256

cd28441c1c1a04981e83053a85c551e685dbbf04f83b5881f6475af0e94cb972
SHA512

a3827d632574bc73fb1f9ed765595ec81d2eaf2cf18c1972179097ffe371708e42e063cb23a660eeec953805ad022e7d59b8f9a6bc3f38e0ea719adf1e42750f
SSDEEP

768:g2htj67c4/kMNW8WmEDrKcSa8Z2a0vmeCVWO159EH:g6j63/+msmcSAa9pNE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca446a07bcceb9c1f4c399b494d54140

Files

ca446a07bcceb9c1f4c399b494d54140
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

WlLogonEvent
WlStartShellEvent
WlStartupEvent

Sections

CODE
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ