79a48512d2d1660c83399651065c4875e69848fbf31405966f0e6f53d06f014c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79a48512d2d1660c83399651065c4875e69848fbf31405966f0e6f53d06f014c
Size

123KB
MD5

b8f1e717663b38648bd9f7c18395daf8
SHA1

9e66ff4cc1bd35951225d5095c5ac3764656c9f6
SHA256

79a48512d2d1660c83399651065c4875e69848fbf31405966f0e6f53d06f014c
SHA512

01bdd51f14e17239d4421866386b8102886dce1a740859dfd904d347963c116574af51373149d1abb3019a87a1f00452f0801c8f3b5eb4c53ae2674da7da198e
SSDEEP

3072:aQ3MXaBzMXbp7+CArdQyqgCh5C/Nr5F15Ce/JZ0apIM:aQ3MXapCbEIgC4LF15Lma

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79a48512d2d1660c83399651065c4875e69848fbf31405966f0e6f53d06f014c

Files

79a48512d2d1660c83399651065c4875e69848fbf31405966f0e6f53d06f014c
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

entry

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ