d77590055660630e8ca7772053bef8c3 | Triage

Sharing

General

Target

d77590055660630e8ca7772053bef8c3
Size

124KB
MD5

d77590055660630e8ca7772053bef8c3
SHA1

6784c61a25f5573ef62c61709ce15d46f6b00dcc
SHA256

ab20bcc68ff44a0b428ad9bd4b2fdac789476ad2575b38b03a35a5dae94d419f
SHA512

3028f8cf75eaaa986a7df16efe6b3c994b142244fbc5a436aab4f2c5f756ce0974d29aef399bcac6c6b589e0027290a2e0bb781a5466fdf7769c3d446e965612
SSDEEP

3072:XmtuLOupGn7wYfr0Dlkh9Ooc4E/rbw6oQ4y:W8LBpkwyKlkhI/rE6oQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d77590055660630e8ca7772053bef8c3

Files

d77590055660630e8ca7772053bef8c3
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain
neishei
neishei1

Sections

CODE
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ