b52c99c08b1557405412a4f8198bd7cd26f2cb0aa910a0bf6e3c799b9f3f6274 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b52c99c08b1557405412a4f8198bd7cd26f2cb0aa910a0bf6e3c799b9f3f6274
Size

123KB
MD5

9b5b420567eecdf07266447f1adea16f
SHA1

8a98cec8416165e577b5231f4b21a08db5004576
SHA256

b52c99c08b1557405412a4f8198bd7cd26f2cb0aa910a0bf6e3c799b9f3f6274
SHA512

e0c742be79dd1889390e6600f938627ac6fedb1e5083bf6de212644250402b53f36ffc3ef6a0eb3a0615ce4a9904cee85dbb589026e6028ef7997595a516835e
SSDEEP

3072:9oCeg54aviUu/sIKzv8hI4d55J/iZBIUKf69A:6I5CUuYvo55J/hUKy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b52c99c08b1557405412a4f8198bd7cd26f2cb0aa910a0bf6e3c799b9f3f6274

Files

b52c99c08b1557405412a4f8198bd7cd26f2cb0aa910a0bf6e3c799b9f3f6274
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

entry

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ