fa53323173c272fee9626adffdb7d4336b299316b5dd9115fdb8674b94384d89 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa53323173c272fee9626adffdb7d4336b299316b5dd9115fdb8674b94384d89
Size

836KB
MD5

5c6560495cf7ea6af964daf9e54c8b58
SHA1

652fd800f88a11a8147aa003a24fa5c887ce9aac
SHA256

fa53323173c272fee9626adffdb7d4336b299316b5dd9115fdb8674b94384d89
SHA512

b8db0ace5a294d941119114a72996a2f0c95ace9e9329a03043ae95b2beb062e68d1d3a2e6c405561ca6d742822cabc5a09d951b8ad8b5121ffb6ce230cf511f
SSDEEP

24576:UkCGEbdfwu0CrkjP8yZZDdYYSOQ0TxW10mG7RD4sVAH:jCGEb+4Q8+LS4g47RD4sVAH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa53323173c272fee9626adffdb7d4336b299316b5dd9115fdb8674b94384d89

Files

fa53323173c272fee9626adffdb7d4336b299316b5dd9115fdb8674b94384d89
.dll windows:0 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

Default
_cgo_dummy_export

Sections

.text
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 794KB - Virtual size: 796KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ