e24048528ff22accdac11fbf79ba2d5c | Triage

Sharing

General

Target

e24048528ff22accdac11fbf79ba2d5c
Size

603KB
MD5

e24048528ff22accdac11fbf79ba2d5c
SHA1

55b4da9a1a21d87d7a5c7a52d080f7c787228897
SHA256

473f3968d2599fa667e08b4cf57291d5cdcb4723538f1e90b5d615fb8169f948
SHA512

b96e10bd800cfadbfc13f71282644028c6d41b0fe27187a0e973223f90c95c082f5d84fd9c1f5abc63d613b9ec97abe43e0917dc32bcc36124e4dd53b13215df
SSDEEP

6144:Ob2HnveeTMmk+5Ky1O1/3baIJ+Qh0OXx53ql:GknsF+511O1/baIJ+Qh/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e24048528ff22accdac11fbf79ba2d5c

Files

e24048528ff22accdac11fbf79ba2d5c
.dll windows:5 windows x86 arch:x86

6c8408bb5d7d5a5b75b9314f94e68763

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

COMRes.pdb

Imports

kernel32

DisableThreadLibraryCalls

Exports

Exports

COMResModuleInstance

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 599KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.upx_
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE