def5c637a4d27b70f7383afc088bb71b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

def5c637a4d27b70f7383afc088bb71b
Size

101KB
MD5

def5c637a4d27b70f7383afc088bb71b
SHA1

47bfb6e5933b1befd79b1021b341b65afb0a62d3
SHA256

e51261fad150b5c516c2d9c638b8add8a707f5662a8b34284de5b320dfa0be71
SHA512

f02ad5f7b1eb6f4711bea4e48ba8f035552eeab328a846e1cd5b79f66fd2ff9f468da9ef17a70226e0e9d28cdfbf2419dd5c25c0cc680656c20fd046ce2c3563
SSDEEP

1536:OgkhBJI4BcDQX2oooD+AyxArAIVJ9bayZbScKEang5V2p:y1I46QXMmAIX1tanUV2p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
def5c637a4d27b70f7383afc088bb71b

Files

def5c637a4d27b70f7383afc088bb71b
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

DllGetLCID

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 156B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE