1fb4305ddb01df7695b72e906993f776c0143bdded5b029de6c6f85c68b76170 | Triage

Sharing

General

Target

1fb4305ddb01df7695b72e906993f776c0143bdded5b029de6c6f85c68b76170
Size

618KB
MD5

73187c590a5ca0a846f8156f649c753a
SHA1

eb5083ab834c0fbc2f75299f4375052cf5b07a11
SHA256

1fb4305ddb01df7695b72e906993f776c0143bdded5b029de6c6f85c68b76170
SHA512

84914930ed4146b28efcebd245b2a198d92a72dd4d829e98acfd7a5e9c7af5c0a02566952b04b252e6395afea8ce3ac2cc6187e66cfc053aa6064bfcf952567d
SSDEEP

6144:VXFA5BFugcAi2Y/DRDLG/WSgnEBID+l8nSSygtNG48gkkgBVOyYB//mWhu8vwFIS:BTNEBIuqf18nFUZ9u8vwF9YubxKb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fb4305ddb01df7695b72e906993f776c0143bdded5b029de6c6f85c68b76170

Files

1fb4305ddb01df7695b72e906993f776c0143bdded5b029de6c6f85c68b76170
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

BatchEMail_Ready
BatchEMail_Send
SHOW_Email
SHOW_PGI_FAX
SHOW_PGI_FAX_RS
SHOW_PGI_FAX_RS_FULL

Sections

CODE
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 385KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 207B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ