f82f8da60b987ddb4f2268a43ebc4f4ff939c92d4922143800b74f614236f73c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f82f8da60b987ddb4f2268a43ebc4f4ff939c92d4922143800b74f614236f73c
Size

450KB
MD5

939888211699b2072006d17674a16b45
SHA1

86e7bde104cf1fffa3a8c307aca2668c273837fb
SHA256

f82f8da60b987ddb4f2268a43ebc4f4ff939c92d4922143800b74f614236f73c
SHA512

1602c824753c2e9f79422a053221cafc3c6f98da43225e4a030b510bd40de4d8aa7c239f74f57a13727146eb8a55defb6bba7664682b67c06add1afa75c2b332
SSDEEP

12288:WwGPSyQYivHPURyjmX/FY/OCedKNjeJE0:Ww7yDgqX/FzCdNSS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f82f8da60b987ddb4f2268a43ebc4f4ff939c92d4922143800b74f614236f73c

Files

f82f8da60b987ddb4f2268a43ebc4f4ff939c92d4922143800b74f614236f73c
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

IGS_Create
IGS_Interface
IGS_RecallEingabe
IGS_SetFontParamsEval
IGS_SetFontParamsPres

Sections

CODE
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 187B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ