055994c894e39eb6564b991959ecf9d27bf565936681fedca4a7488f1c4f6c16 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

055994c894e39eb6564b991959ecf9d27bf565936681fedca4a7488f1c4f6c16
Size

125KB
MD5

21a57f1227874eb378aa71b2ecee3f81
SHA1

8a441aac3a66312bf22a2457490011533c07ce40
SHA256

055994c894e39eb6564b991959ecf9d27bf565936681fedca4a7488f1c4f6c16
SHA512

746258b1c369cf43fa26ea3c47611a2ee7dfaea043e060f3fcb4ab8d4605194fd39f94c4e5eb87fa8b98a70c3ea8b8d7328aeb3a8c30a9d0cc8e0fa31c35f7b9
SSDEEP

3072:HQRxNgw8a0HNXmGmeiglK1NIHYNvnLI5+/rz8jBksu:H2II0Hd7E1NHJnxf9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
055994c894e39eb6564b991959ecf9d27bf565936681fedca4a7488f1c4f6c16

Files

055994c894e39eb6564b991959ecf9d27bf565936681fedca4a7488f1c4f6c16
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

entry

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ