f10645032[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f10645032.dll
Size

447KB
MD5

4a9eedb99cfa1ef01d727b2c1793621d
SHA1

0fc249d09cb8c95a026045be9cd3d830b02b979d
SHA256

dd53dac657af2603a4070a63115d4db9d46e1ed9f57f3952672bbbbe27b2830f
SHA512

f1f7ee6b72031711791cd3c42f4632a77cb992f3a0d3b6c4eb1f1c67314e617c8638bbc8f31602274938b874049c1979078dea2b012497473e6e37cdda3c29ab
SSDEEP

12288:xP9SUDBIh8FkprmWiAH+cjPK8NYFDigqnNkSwIzaT:xFSUD2h8Fkh4AH+cjPK8UDigqnNkSwIg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f10645032.dll

Files

f10645032.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ