daf697adeac9d9f74bd28bb3ff2bd5a7a6c94f9472693af2da41163fe2e0809c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daf697adeac9d9f74bd28bb3ff2bd5a7a6c94f9472693af2da41163fe2e0809c
Size

123KB
MD5

275088d41f9611a43498715a8ab63c98
SHA1

7400f044f3b6739399a53ab8dcedb2659deae9c9
SHA256

daf697adeac9d9f74bd28bb3ff2bd5a7a6c94f9472693af2da41163fe2e0809c
SHA512

2b76c9dfd7fcaa856993c7659f70af9b2790af7496888d2a5993c1678f0eb7371f47ac5d98bbe9d43e05ee19258d598020743c9e8e697892a9d5edcd1ce07190
SSDEEP

3072:d76ngU4/uBRb8vOYcQlWn7wU2JL8mcozgSFjfBK:dUZBQWUle7wZzzgSFzBK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daf697adeac9d9f74bd28bb3ff2bd5a7a6c94f9472693af2da41163fe2e0809c

Files

daf697adeac9d9f74bd28bb3ff2bd5a7a6c94f9472693af2da41163fe2e0809c
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

entry

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ