cb8cfc147725a377c7249d406f049af1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb8cfc147725a377c7249d406f049af1
Size

89KB
MD5

cb8cfc147725a377c7249d406f049af1
SHA1

695babfbdbf2c36ec249d571d84060d919428336
SHA256

981c3bf79aafa9b31144cba15e59053f0324e4f3c6c4bac4f92186751e522875
SHA512

39eb3118a0287b3094fa4783d048a09768310da9e305fdce2e02c395cd4476549f76af4eca3dd7f9d2a0fffb8863bdd87d9d5faa0f436d796a8be1764b55cf88
SSDEEP

1536:fjqjoQ05q12JVjLS+NbVHJqDpQ4UTZW0fW3lTjLBoHs56UVRi9HVnvjBKA9:aoJa23SabpJqdQ4UTZDfW3lTjLBoH06r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb8cfc147725a377c7249d406f049af1

Files

cb8cfc147725a377c7249d406f049af1
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Init
Start
Stop
TakeGateToCollector

Sections

CODE
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 129B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ