b08c039d733ed5f174e43e37fb0f99ebb7b96853395cc5443c864a90407a352f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b08c039d733ed5f174e43e37fb0f99ebb7b96853395cc5443c864a90407a352f
Size

2.9MB
MD5

db4f7fdb0538cd8fa75eb223787ce82c
SHA1

6a5312037d87e6a0f4e68cad115fd2187796e701
SHA256

b08c039d733ed5f174e43e37fb0f99ebb7b96853395cc5443c864a90407a352f
SHA512

9312d7caa4132f1890087375c4557588fd2c85d88f8603fee7193706f22d0d41ac2573eb3907f3c04d863d8e751119068c8e82e04e217ba48c3663cd055a0419
SSDEEP

49152:trmpq+5++4/hdynN89+T3ysT6FokkAIYgIoIO3N/y0YQUQfahQ6ewgh+4rR8A27j:trm4PHmpfrXvWuuWkoMQr6clu9UVzt5g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b08c039d733ed5f174e43e37fb0f99ebb7b96853395cc5443c864a90407a352f

Files

b08c039d733ed5f174e43e37fb0f99ebb7b96853395cc5443c864a90407a352f
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

WinXYSDK.ni.pdb
E:\Workspace\windows_sdk_v3.3.1\XYClientWin\Production\WinXYSDK.pdb

Sections

.data
Size: 458KB - Virtual size: 458KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ