2934079c674419c92a8b62523680952b53378d8074cfb901d6a9e3763202c897 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2934079c674419c92a8b62523680952b53378d8074cfb901d6a9e3763202c897
Size

4.1MB
MD5

a79b838844700e7e9cc9db8f79ccc466
SHA1

dc8ca7b38da74086b98c26416361b9fbec9852df
SHA256

2934079c674419c92a8b62523680952b53378d8074cfb901d6a9e3763202c897
SHA512

6f5f23523c351aeadc24e92ec5e104d8cd877300380d50f7344368d567067c2217c519d908e6c53d06d111e3c33991e32cf71a868e8f5722660b86b01eb37cb7
SSDEEP

98304:5ceICD/274qiOSqG+biU/YQrPZ9bRgh2Iqo6TnlmjLy+KbCw74NF:5dICjN+KkiUPrPZs9RS0m+e/74r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2934079c674419c92a8b62523680952b53378d8074cfb901d6a9e3763202c897

Files

2934079c674419c92a8b62523680952b53378d8074cfb901d6a9e3763202c897
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

dahaoban
e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
xiaohaoban

Sections

.pec1
Size: - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pec1
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE