dacfac8843dc4512dd491fab426d639728e7951c29f34be24003ea997716a9a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dacfac8843dc4512dd491fab426d639728e7951c29f34be24003ea997716a9a7
Size

30KB
MD5

e735d9f250803b6824e6ef90a01fa09b
SHA1

75304d5c20fdfe2b80b70a82a3de9a92e7f6e0ba
SHA256

dacfac8843dc4512dd491fab426d639728e7951c29f34be24003ea997716a9a7
SHA512

2105fcc558437c5fa07f71e1a4dc46163c031c737c21434b18c5efde85b12c89135b9326d7d23474709c356bb697fe9e04f957338e4c1f549942d1f828f068f1
SSDEEP

768:hgtrVkjHqWyd7s3cbGsucC50il4SPOCna0JEi:hk8KWsC50il4SPOCna0Si

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dacfac8843dc4512dd491fab426d639728e7951c29f34be24003ea997716a9a7

Files

dacfac8843dc4512dd491fab426d639728e7951c29f34be24003ea997716a9a7
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Virtek.CommonViews.Crux.pdb

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ