d542b39a839ba4d7c5e94d92ef696c8c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d542b39a839ba4d7c5e94d92ef696c8c
Size

35KB
MD5

d542b39a839ba4d7c5e94d92ef696c8c
SHA1

1e9a215d0a9c80c44671d1e5ba3e967b6110dda9
SHA256

e0a9aefa1627e3e1bf3fb340c73dac771330767ffa66ce2e6325df69a1acfa2a
SHA512

18f8fae228b1922ec4aa0b710ce7c0aa9edec1a18cf485b16585c9545d452d2d9b0a46fb4ad4b131262361db5def9adc4f4000e13a272fda521d88624514a84c
SSDEEP

384:8Ozakryyly8156/dasxuPKKAya0A8iYY8+WOZ5UR/4ja9Q9XYCeOFNEkJGHetWNQ:Ds81AwPVa0dRL/bR/4jaQZNYwtoDGhV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d542b39a839ba4d7c5e94d92ef696c8c

Files

d542b39a839ba4d7c5e94d92ef696c8c
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

tan16d

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 67B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ