8268a1590876cfe976ea9702fdb0fb63a25b994eae4a6b0f951afc9bb3b88f96 | Triage

Sharing

General

Target

8268a1590876cfe976ea9702fdb0fb63a25b994eae4a6b0f951afc9bb3b88f96
Size

5.0MB
MD5

6f1a9af6fefaeef4097d95293d8cfa5e
SHA1

87072ea2629fc48aeb9a832d12bdee25df117b41
SHA256

8268a1590876cfe976ea9702fdb0fb63a25b994eae4a6b0f951afc9bb3b88f96
SHA512

7aab2368c632d84c10bf4722b182a003afb89d6d0f856b640803ecb16fd35238c666212cacdc1d8c564017c964b86f29f535f399b06b3374cecf9d385e841944
SSDEEP

98304:VQNYCEJLRT8VVA7G8ZDctyszHRppsBEWeCeFUkAQw//raA2Kzd:2hWEWhgXMf2CD1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8268a1590876cfe976ea9702fdb0fb63a25b994eae4a6b0f951afc9bb3b88f96

Files

8268a1590876cfe976ea9702fdb0fb63a25b994eae4a6b0f951afc9bb3b88f96
.dll windows:4 windows x86 arch:x86

96a8ec412858a637750b430c36c75b02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free

kernel32

DisableThreadLibraryCalls

Exports

Exports

qad020a_2_1_3_1_dwgen_crea_variante_dwg
qad020a_2_1_3_2_dwgen_crea_variante_dwg
qad020a_2_1_3_3_dwgen_crea_variante_dwg
qad020a_2_2_3_1_dwgen_crea_variante_dwg
qad020a_2_2_3_2_dwgen_crea_variante_dwg
qad020a_2_2_3_3_dwgen_crea_variante_dwg

Sections

.text
Size: 4KB - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ