d1f4a1479b80d75e90ad9046255734f4b34a0cc5fc368d59fd323a89882819cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1f4a1479b80d75e90ad9046255734f4b34a0cc5fc368d59fd323a89882819cd
Size

1.1MB
MD5

b3b581b91b30de8767841c809ce4d71b
SHA1

38f1f64f154cc2d8efd326cad7c55fced7de4878
SHA256

d1f4a1479b80d75e90ad9046255734f4b34a0cc5fc368d59fd323a89882819cd
SHA512

075281cf9b778fad6aa474581fb36580436544acae1c0ffa754dbaa5916a074d970b0b9ddcd4a255ecbf2d4a8b4c4caf1e02cf18d0bc8071c92e1cd5736d248c
SSDEEP

24576:3ZnkLwMeAiHsa7uVnMObEDO1hxiVmQJyS7nMuqDO+uT98sx97FTiE7Z+s:3VkLwMeAiHsa7uVnMObEDO1hxiVmQJy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1f4a1479b80d75e90ad9046255734f4b34a0cc5fc368d59fd323a89882819cd

Files

d1f4a1479b80d75e90ad9046255734f4b34a0cc5fc368d59fd323a89882819cd
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

StanPackage.ni.pdb
d:\dbs\sh\ddvsm\0113_122248\cmd\2q\out\binaries\amd64ret\bin\amd64\\StaticAnalysis\StanPackage.pdb

Sections

.data
Size: 219KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 848KB - Virtual size: 847KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ