4cbfcaf7495aec11c61ce81ab8cd5da0d5f186595b80bf9db4c76fc623f40c98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cbfcaf7495aec11c61ce81ab8cd5da0d5f186595b80bf9db4c76fc623f40c98
Size

125KB
MD5

2798784ce44395966c698a1a6baf4d0b
SHA1

e45138c23667a4e42dd00ea2a2f030a8c0af5203
SHA256

4cbfcaf7495aec11c61ce81ab8cd5da0d5f186595b80bf9db4c76fc623f40c98
SHA512

827159e9ec30b955561ae7dfebb55ad90557e43c694bf0841ed1f1879d86f63c2cf29d5f30522fe3ba90475608fc51cef7ded9209cc00b11a50e8604a64e65b9
SSDEEP

3072:rVHHQVY1s9uTb/uuwdtqk80cGeWU+d2zAMAjjLZCTFi:VJquTb/uuw7upwvHNCT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cbfcaf7495aec11c61ce81ab8cd5da0d5f186595b80bf9db4c76fc623f40c98

Files

4cbfcaf7495aec11c61ce81ab8cd5da0d5f186595b80bf9db4c76fc623f40c98
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

entry

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ