decb3eeb1f09479bffee9727d4ecd03c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

decb3eeb1f09479bffee9727d4ecd03c
Size

48KB
MD5

decb3eeb1f09479bffee9727d4ecd03c
SHA1

03877cb09ec9c9f112f787b5e6a5096d8cdd3172
SHA256

193261e5325a1d9b2ef9cac065d45bf407944242d0b7720ad2a704d9c4d473ee
SHA512

d3e2f9b605cfcc1f0e7b7db25dd8c4cc879c0a99a3bbef57fbc3a6df92c20ff6e363c00c74d013e09977f31ee48c458c0c3bcbba9677c776451434b7dfbfcddc
SSDEEP

768:gJ2olLhagXapBinx6OMOpBCwnLgN2R+6fIfKLk288K5JJk0:gJlAgLx6OMOH/8icKLA8K40

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
decb3eeb1f09479bffee9727d4ecd03c

Files

decb3eeb1f09479bffee9727d4ecd03c
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
PPPP
QQQQ

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ