117c422be555bb733a53fca3916ae99f89ef15a8ee78ef24902327fba6395115 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

117c422be555bb733a53fca3916ae99f89ef15a8ee78ef24902327fba6395115
Size

4.9MB
MD5

0a0cd9c710c7bbeaeccdf9a3923912eb
SHA1

0a7047ff31daff7e561c7d1cb74e93bf0084d813
SHA256

117c422be555bb733a53fca3916ae99f89ef15a8ee78ef24902327fba6395115
SHA512

27654a7bd98ef1188f8304b8ebf02b674c5e5c8f32a1fb3671e1d6b7563764cb44ae8c6a12116bbde91b1a656d6e6ece7d60a78f417c3f7232f3fce4ea93d984
SSDEEP

98304:Fd3Bzu+vba/ypTyUP1DaZAR3Ss6AE/N3HlNCDbcFd3a7+xhGIYC2BDL6:/xzuuXVxP1Zil/NaycaYTDL6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
117c422be555bb733a53fca3916ae99f89ef15a8ee78ef24902327fba6395115

Files

117c422be555bb733a53fca3916ae99f89ef15a8ee78ef24902327fba6395115
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 12.2MB - Virtual size: 12.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ