4e893ce57cd53cc344932b93b064acfc6dd730cd8df148be5d0b7bf1a50b4ca8 | Triage

Sharing

General

Target

4e893ce57cd53cc344932b93b064acfc6dd730cd8df148be5d0b7bf1a50b4ca8
Size

125KB
MD5

c27db38eb4e160731a9dbd0cd6b424d1
SHA1

414aecc1a242c03c7c0d2b39ecf08fd07fc882cc
SHA256

4e893ce57cd53cc344932b93b064acfc6dd730cd8df148be5d0b7bf1a50b4ca8
SHA512

90ff7c93a02ca6c1003fe97d78531d8ed894171e41ea0028cf287e451bffd68aff9b5ed32abbb42f61ce89d3905e47f50a64a826ec19908f76564b8c7b16643f
SSDEEP

3072:KguyDa5huD6Y4ya1at/k64hXYq3zlVCe7Wo7eIHhUCDNA/jrU:ZI0OJyWGk6YX5BE18eMUW+rU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e893ce57cd53cc344932b93b064acfc6dd730cd8df148be5d0b7bf1a50b4ca8

Files

4e893ce57cd53cc344932b93b064acfc6dd730cd8df148be5d0b7bf1a50b4ca8
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

entry

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ