0e2e85a9e0e3f2937f2c311fd62a78f182dff446cf2f1532d062a54ed3f20c52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e2e85a9e0e3f2937f2c311fd62a78f182dff446cf2f1532d062a54ed3f20c52
Size

152KB
MD5

61229d7639ac564d6739615149db8eab
SHA1

b12427775ee4ddf38a659fdcc47f1e4eaa9f43df
SHA256

0e2e85a9e0e3f2937f2c311fd62a78f182dff446cf2f1532d062a54ed3f20c52
SHA512

9cec65f044c30ec5ef60833412e6b3fbd56d0a989ae1f912e24eab6c1a578b6b612f3cd8a5c1c3daffef21839026f89b06a0bf8931a638d09335cf5e630a0d07
SSDEEP

1536:nLLQedEcm8L9qWhf6vGnHONB2PmIzH8qIY0/GS/l+X3vNyyPF1fL571:n33hm8Jf6+HH8qNAGSUPNyyPF1fL571

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e2e85a9e0e3f2937f2c311fd62a78f182dff446cf2f1532d062a54ed3f20c52

Files

0e2e85a9e0e3f2937f2c311fd62a78f182dff446cf2f1532d062a54ed3f20c52
.dll windows:4 windows x86 arch:x86

8ff9973472dd7a90233123b76aedbf37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
HeapFree
GetProcessHeap

Exports

Exports

_Pegasus@8

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ