cca5984e6e1e8810488e2203e29616f3913ad7453afad788808e70fdbd73da80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cca5984e6e1e8810488e2203e29616f3913ad7453afad788808e70fdbd73da80
Size

64KB
MD5

0e544f993b8bc1678043e78901be42f5
SHA1

05bc52848f405f24cbefea9d892882c797560d6c
SHA256

cca5984e6e1e8810488e2203e29616f3913ad7453afad788808e70fdbd73da80
SHA512

01186bbbebd338c0de1a49fe81fd1b2fad03cfa9e34b53a0b6637b300741c100d29dc21870220ab96f9161c9c4945fad6a7670a9fa3ee7afe963e26839e94f57
SSDEEP

768:hliqbfoPiXBZBlzqA8lUL5AZAMGyPXubzcePyI2Q4Nxpk229YvOPMvXU2cbpZvnH:zDbfzTlzqzl6AJ/7I2jma826nH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cca5984e6e1e8810488e2203e29616f3913ad7453afad788808e70fdbd73da80

Files

cca5984e6e1e8810488e2203e29616f3913ad7453afad788808e70fdbd73da80
.dll windows:4 windows x86 arch:x86

0e8bedb37729ec79eafac237e7b931a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock

Exports

Exports

_Pegasus@8

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ