249b0f79032d0793b9c5c4e247fa29b3d5294207c62af1a667fe8f765bd41325 | Triage

Sharing

General

Target

249b0f79032d0793b9c5c4e247fa29b3d5294207c62af1a667fe8f765bd41325
Size

123KB
MD5

6917c5f735d2220dbf8407035cfe5c3d
SHA1

81ccf75132dadf8008ed9292a34bdb6e64309d5c
SHA256

249b0f79032d0793b9c5c4e247fa29b3d5294207c62af1a667fe8f765bd41325
SHA512

a6ecfa6442bb898e4ab611afb9dbb16ebdbdbe9641d9209dabac028f69a1b7ceb60ad43ee7f6b1d21560d8778b61b984633fa9ceb82374e8d6576169bef9abc1
SSDEEP

3072:Ec1zbCcCRyNuSfKjLlsYCDBmIDG/xzbFhEGIWuTwAqQETY:EcZaRp0KflsNBb6/xzbEGtYwfQET

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
249b0f79032d0793b9c5c4e247fa29b3d5294207c62af1a667fe8f765bd41325

Files

249b0f79032d0793b9c5c4e247fa29b3d5294207c62af1a667fe8f765bd41325
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

entry

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ