4dcb558bebe7c43d6ba9eb3946bd2dc5bbe3b3720262c90e1021b89a04d55fac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dcb558bebe7c43d6ba9eb3946bd2dc5bbe3b3720262c90e1021b89a04d55fac
Size

125KB
MD5

e7189c1ceb0257fa6889f4eeb42e5933
SHA1

2af32f3616119c8fcb4351e2d4192be070fe76bf
SHA256

4dcb558bebe7c43d6ba9eb3946bd2dc5bbe3b3720262c90e1021b89a04d55fac
SHA512

a876549730329a621f1580c1b53dc94079bf9d3882709e96af7b29b85df100600e2c371d5626a819ad28a5e8f1045d1f91234710dbc21c7d1b33e8a66a621c93
SSDEEP

3072:uwvwyyYsGJeYAbR07OhXNRZcKrnkVmqi4iBo4x/h5NPY2K/:uwvzyYsGAba7Qdn6A4i/7NA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dcb558bebe7c43d6ba9eb3946bd2dc5bbe3b3720262c90e1021b89a04d55fac

Files

4dcb558bebe7c43d6ba9eb3946bd2dc5bbe3b3720262c90e1021b89a04d55fac
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

entry

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ