fdac5ac536fd43744895eb545a50b1474affe23bb33204968c9c744977edfbed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdac5ac536fd43744895eb545a50b1474affe23bb33204968c9c744977edfbed
Size

141KB
MD5

9f5716acef9750171a193050bded95ad
SHA1

708f167afccebb3c12ac823dd1ae43deb91c33e7
SHA256

fdac5ac536fd43744895eb545a50b1474affe23bb33204968c9c744977edfbed
SHA512

356cdafbd8d71568820fe88353ac00de92e87a399c3a4c00d1b657e873e13e4fb33f4713134a8345b57c22405bd157ab202575957fb0112b3e764cb228fb1484
SSDEEP

3072:/Omcuu6gRegGbrKGfFSXJ+erAKvOQ0kK7s5FT:mmubRegm/fFSXJ+kAK2Q0kK7w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdac5ac536fd43744895eb545a50b1474affe23bb33204968c9c744977edfbed

Files

fdac5ac536fd43744895eb545a50b1474affe23bb33204968c9c744977edfbed
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

;x9.=3
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ