2c61d128960a18530b18e03f9a4b0a5bbb4d4862778c2535c5834173d9d561f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c61d128960a18530b18e03f9a4b0a5bbb4d4862778c2535c5834173d9d561f8
Size

123KB
MD5

e706926ee279c86b77fa3be7ef2bec80
SHA1

d48923ef77a4ef2601f29e2b378e21feaa22fff4
SHA256

2c61d128960a18530b18e03f9a4b0a5bbb4d4862778c2535c5834173d9d561f8
SHA512

c18a5389b8aac6aaffa67915da1bcb3c30457bcfa7983bf349e06fac0e4625f69bff83e99139dd04ec527a34c935b5d9c40970dbff4583ab2e24eba976683024
SSDEEP

3072:4rGNCJypaQ/DB0XH1zHXEyJauYnxQ9UynUvih7:nNCJgaaOXH1TXcxKUy5h7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c61d128960a18530b18e03f9a4b0a5bbb4d4862778c2535c5834173d9d561f8

Files

2c61d128960a18530b18e03f9a4b0a5bbb4d4862778c2535c5834173d9d561f8
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

entry

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ