cf2a957a97256eeb695ec60b01693b22ec82d913c9ea5e044ee7554d3f482a7f | Triage

Sharing

General

Target

cf2a957a97256eeb695ec60b01693b22ec82d913c9ea5e044ee7554d3f482a7f
Size

2.9MB
MD5

33c6ade8a1ee38221956ace2cd582334
SHA1

503a8dbc83d2dc51d084311ee9c3241528894f5d
SHA256

cf2a957a97256eeb695ec60b01693b22ec82d913c9ea5e044ee7554d3f482a7f
SHA512

c72220d7946fed58ab557173d1823aa614a5fbf2fe458b946ae020b8f12e1046b7ddfddbd1f56054ca3c78c5a90bf2dcf514787020d616eddd233d9e0ca4e8ce
SSDEEP

24576:V9Xu6xXTRNsn9+gS6uHk1U43yIkNcIN6FeNa6rMCoCv3dgpDIsVNloeON:fcLS6uH8Ucg20zrMAv3dgpkeO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
cf2a957a97256eeb695ec60b01693b22ec82d913c9ea5e044ee7554d3f482a7f

Files

cf2a957a97256eeb695ec60b01693b22ec82d913c9ea5e044ee7554d3f482a7f
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SimHubWPF.ni.pdb

Sections

.data
Size: 325KB - Virtual size: 325KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ