ff2948bce85c6f61aa5f098c816237cdee12cf9bbb5d17fda447025f7c874cbb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff2948bce85c6f61aa5f098c816237cdee12cf9bbb5d17fda447025f7c874cbb
Size

123KB
MD5

ef8736f3fa105c7a229ae3311a37ea8e
SHA1

f50c25bb6179834d0e4a6570d8040b8b4a59cc46
SHA256

ff2948bce85c6f61aa5f098c816237cdee12cf9bbb5d17fda447025f7c874cbb
SHA512

76605356337a93f4b4a2fc4fb3c53619b9050ec7ad1f40a3251f26ecc62663385080c1ca118580f2a23066d96271530930eb2318c110ac29190bcb70ed7b7929
SSDEEP

3072:GTQpfoDgF4Z86zplf7JP6/c71uAhGsMo7z32ANb:6wQEF4Z8iDtP6c710632g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff2948bce85c6f61aa5f098c816237cdee12cf9bbb5d17fda447025f7c874cbb

Files

ff2948bce85c6f61aa5f098c816237cdee12cf9bbb5d17fda447025f7c874cbb
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

entry

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ