e1daf1eb6c0fe8d0096939b90d40c93e | Triage

Sharing

General

Target

e1daf1eb6c0fe8d0096939b90d40c93e
Size

442KB
MD5

e1daf1eb6c0fe8d0096939b90d40c93e
SHA1

65aa8590ff8a4da76e558374bc0a2e4037050930
SHA256

71f73367026c28a32e1e6925c38b88991cd0340ce32aafdbc49ae3f01ffd6534
SHA512

d88fe03a5b9f058aadb514090c11758fb1204720eaf5f0dfb118992b57219bf2b0405d442528ddb5bacf8640104db81e904529a802be37a6ac62743a4dc5fa69
SSDEEP

6144:DKA8+He0qUeSY3Bws4xvEOt/qtCBwNPW7Krypvf0qfsBNOttwHGN4g8J2Wk:EyPPY3BYxvE4ytZt88msBctGHUp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1daf1eb6c0fe8d0096939b90d40c93e

Files

e1daf1eb6c0fe8d0096939b90d40c93e
.dll windows:4 windows x86 arch:x86

4ae8cce1cdb668a8fad907517a62efc7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

pdb.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
ReplaceFileA
Beep

Exports

Exports

vbuxgz

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 527B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 380KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ