d35b48c7c3d0d9fb8572d2cd18070c27 | Triage

Sharing

General

Target

d35b48c7c3d0d9fb8572d2cd18070c27
Size

52KB
MD5

d35b48c7c3d0d9fb8572d2cd18070c27
SHA1

3dad9f1767e4a0890e6455dd8deba90c19051852
SHA256

e0c67ee40b42cb2d5ebf4acfa134f2f74c6411c8175bfa9d75d9e1879b890cda
SHA512

96032e13cc11ff808d257737cbde14cf90b668bf41baca1ef995ebc9904852952bd6efcabad2fa67a72785efd6f537b55eee7ba72032864e7166fd2a9f9135be
SSDEEP

768:C6igiQixu7HSM168ewWQVcjiijTh6+V1g:D0YyQDqNjt7V1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d35b48c7c3d0d9fb8572d2cd18070c27

Files

d35b48c7c3d0d9fb8572d2cd18070c27
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ZtGame_IN
ZtGame_OUT

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ