edca9ca47dca0bd9b4e1e4f1dbb412430eb58274c2609f84e56b5159742a0b4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edca9ca47dca0bd9b4e1e4f1dbb412430eb58274c2609f84e56b5159742a0b4a
Size

123KB
MD5

b00573ee3376e5a32683fa392d29b77a
SHA1

a1c641a572859f4f48e4a58caf89c644df734da1
SHA256

edca9ca47dca0bd9b4e1e4f1dbb412430eb58274c2609f84e56b5159742a0b4a
SHA512

865cb9fb28300afe52abb1147a425086121a068fc00759aafe366ec3079be4877c95b102dbc14ea831c8619874d115471497a3cec1127a54467a29347c6ea1a1
SSDEEP

3072:Dq92phZThqR3osuMuxapJ41iJZiKOLyO/j1i4u/SY4JX:DuWZTU0MOyJ41QUKOLL/MNS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edca9ca47dca0bd9b4e1e4f1dbb412430eb58274c2609f84e56b5159742a0b4a

Files

edca9ca47dca0bd9b4e1e4f1dbb412430eb58274c2609f84e56b5159742a0b4a
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

entry

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ