b1b8748b4e61b3da6dbbad6fb489f0ab1a2021d94be59a3b3ebc5c501d6db593 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1b8748b4e61b3da6dbbad6fb489f0ab1a2021d94be59a3b3ebc5c501d6db593
Size

2.1MB
MD5

2f5d7da90ed74fa92242e6029b05b122
SHA1

22f342ff1443a7d87f0e48dfc167d085c6037f09
SHA256

b1b8748b4e61b3da6dbbad6fb489f0ab1a2021d94be59a3b3ebc5c501d6db593
SHA512

8cc8b75f05b32536774d2d1fbdabac5c23160a723b1df234e6d3e416a32ab267c1d3d7d9a467fd5af3b4a100e116e31607d1967e6fcf6cd70360f670ca7e4d2d
SSDEEP

12288:lh2sowicfOie1K5D/m1+Ho45WhArvxzpTsivLwcsBgBJh4Nmhzz9IT/E:z/9fOxOs+dSArvnThcVBgvUe99

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1b8748b4e61b3da6dbbad6fb489f0ab1a2021d94be59a3b3ebc5c501d6db593

Files

b1b8748b4e61b3da6dbbad6fb489f0ab1a2021d94be59a3b3ebc5c501d6db593
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 866KB - Virtual size: 865KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ