28951aababaf0e164b46a015d3b9b007634688837e6bf59ee61cc0f918112eb4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28951aababaf0e164b46a015d3b9b007634688837e6bf59ee61cc0f918112eb4
Size

392KB
MD5

2768d5ecafc24218ee44c88db53f4615
SHA1

aaa3bac9ed643acec6979b5324f9e5c0e58abbfd
SHA256

28951aababaf0e164b46a015d3b9b007634688837e6bf59ee61cc0f918112eb4
SHA512

d2b33ab52ee7fa9078a83d96f02ddb168690fd5e1c7be9d007a381c1cecad90017deebf23e9b51d33d992327e84a095cf21ec5dd01ee41ad0a85145834610573
SSDEEP

6144:8TsGO3aLwCg7fMbFmG8lodHcHbH2Wx2sdtOGnSuRIoWq0ZFU:8wqcC8MbFmjy987lx28L9R0w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28951aababaf0e164b46a015d3b9b007634688837e6bf59ee61cc0f918112eb4

Files

28951aababaf0e164b46a015d3b9b007634688837e6bf59ee61cc0f918112eb4
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 249KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ