fa49da97a13548b4d25553eefae6671153feb90a106d6784c1b97cfe78bf0fd2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa49da97a13548b4d25553eefae6671153feb90a106d6784c1b97cfe78bf0fd2
Size

3.3MB
MD5

9ba486b94ab9581f3a4f543e23b4b0b8
SHA1

b9142830efc5e62ce777594bf860e9197c54e966
SHA256

fa49da97a13548b4d25553eefae6671153feb90a106d6784c1b97cfe78bf0fd2
SHA512

a6e2ee49e225a6dd0459252acb79aef3d05c20b440bd148163c77586444e01e023c1176f970fb4d838bf83118c9c0b47fd5272cb5f66f882957f0b01fbd35249
SSDEEP

98304:4l6vnfbT6BG+P8IQ/wYQwUOigEzGAXGiGzaFtJ:D2bP8bbQBnzkVOT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa49da97a13548b4d25553eefae6671153feb90a106d6784c1b97cfe78bf0fd2

Files

fa49da97a13548b4d25553eefae6671153feb90a106d6784c1b97cfe78bf0fd2
.dll windows:4 windows x86 arch:x86

03d4c3d1fedd8eee471e3ac3ee7bd762

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

comctl32

InitCommonControls

Exports

Exports

crc32
deflate
deflateEnd
deflateInit2_
deflateReset
inflate
inflateEnd
inflateInit_
inflateReset

Sections

Size: 3.3MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE