bb4e43e3405698f25e197f4ca98249cfde61d8151e2524a7e61f28d35322e854 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb4e43e3405698f25e197f4ca98249cfde61d8151e2524a7e61f28d35322e854
Size

16KB
MD5

3d476cfda18b67138fb89c4a74c17e90
SHA1

dec23169da15d267a408e2668beaf684c9b1aff7
SHA256

bb4e43e3405698f25e197f4ca98249cfde61d8151e2524a7e61f28d35322e854
SHA512

fbf81ef6d194f167921b01301cc020d752b8f8e82a9ad4dd973d7dc3a0813d86063297995748c312a82c06e60d1bc3b4b6ba64ca824af89ed29539d4ba71efc1
SSDEEP

192:P5SjUxjOUpYFSshl2OEKIWGRPw9FEQomUqPmZ3c0mKRmnlFCtLvspJCEMJ:xSg9XpDshgWIPuEQCqPmZsAmlwJgU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb4e43e3405698f25e197f4ca98249cfde61d8151e2524a7e61f28d35322e854

Files

bb4e43e3405698f25e197f4ca98249cfde61d8151e2524a7e61f28d35322e854
.dll windows:5 windows x86 arch:x86

6c8408bb5d7d5a5b75b9314f94e68763

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\B_AutoUpdateBuilds\AUTC14.0\autclient\lwp\build\yantai\AUT-Client\omaha\scons-out\opt-win\obj\goopdate\resources\zh-CN\goopdateres_unsigned_zh-CN.pdb

Imports

kernel32

DisableThreadLibraryCalls

Sections

.text
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ