b6d32ae916a2cfd4220c5613f3a8210cfe3c8b1ed3b66a38588891a1d1bf7aab | Triage

Sharing

General

Target

b6d32ae916a2cfd4220c5613f3a8210cfe3c8b1ed3b66a38588891a1d1bf7aab
Size

306KB
MD5

fbe5f9f39094e1453dcd1101dc897020
SHA1

8cc91bbb6bb8902bf29d1e4a907e482c5d2e3d48
SHA256

b6d32ae916a2cfd4220c5613f3a8210cfe3c8b1ed3b66a38588891a1d1bf7aab
SHA512

38e8931359001e616beef62e63bf77994f9722e85ed1f3b1d23e3778b5d8056c1fbba64539154352a761629ed68a4b201102d610c565282bad6c1347f1f2314e
SSDEEP

6144:Yu1O8/R/35k0UmtbxeAe26fNPNxAow/CzfB7+ZnAdjAAQnZF3Uvu:Yu13/R/3OWt36fNNqf+QZAdjAfZxUvu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6d32ae916a2cfd4220c5613f3a8210cfe3c8b1ed3b66a38588891a1d1bf7aab

Files

b6d32ae916a2cfd4220c5613f3a8210cfe3c8b1ed3b66a38588891a1d1bf7aab
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

difxapi.pdb

Sections

.text
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ