dbec12bca52ba709643bbdaf13431e10N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbec12bca52ba709643bbdaf13431e10N
Size

56KB
MD5

dbec12bca52ba709643bbdaf13431e10
SHA1

c20306b50eed84141ddcc10cfdeb2542e17d4dfe
SHA256

0e537f331949803b6e2d1da2c6ef875b1c8bb287839c031e28bd5e2fb4f23844
SHA512

3809a7bd3ce77cdd806963197aa94486d255aaab04bf5595b1b11aa83378d161479e57750b3a4664428478f8fcef16b046133b5b9dc708e923b18c65e3be694a
SSDEEP

768:vh0sBpe8i4Z8xjeNRD7JvC7YM0iAYdfzbezYJHCSwxEBgVAPhzVxlfL4qUhQYcbc:Z9BI4ZKjoRD7dC7YIfzbU64cFJfSBi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbec12bca52ba709643bbdaf13431e10N

Files

dbec12bca52ba709643bbdaf13431e10N
.dll windows:5 windows x86 arch:x86

6dfbc160505aa2f7205766eaa6fe72a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CreateWindowExA

Exports

Exports

ServiceMain

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ