e026dd4b01bc937827a01c62934252ba | Triage

Sharing

General

Target

e026dd4b01bc937827a01c62934252ba
Size

2.3MB
MD5

e026dd4b01bc937827a01c62934252ba
SHA1

48bd61ae9a60e0b468d9d61bd6cda6e8d3d996e5
SHA256

52c3793c6487941cc223620047e42d5197328ccad7e02a2ee4ee362ae87145e2
SHA512

cf1deb0aa54d74177ab193eb2592d473d9bedf5ed88780119553308276a3a18056eb077a2aaf35a0723e290369269bcdaa661cf6fd8e708c6d3628866a249077
SSDEEP

49152:yJ2ilKG+vL+rPMOSxlTyWfu2KCadIxmHmLiaKrUsyoKG4soFqB34gDHZv6aFB:m4pL+DcxlTyH2ZaixmGyrUsyoKdFqN8q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/fire.dll

Files

e026dd4b01bc937827a01c62934252ba
.rar
fire.dll
.dll windows:4 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

.text
Size: 188KB - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
item.dat
npc.dat