e4b8e64ba6493120c7728bddc844e628 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e4b8e64ba6493120c7728bddc844e628
Size

261KB
MD5

e4b8e64ba6493120c7728bddc844e628
SHA1

5162e8b479835c2aff439bf5a0c5e70329d517f3
SHA256

0b1d881b010b2230a5ba9e5d9a0f0d31e00ccd6ebedd2568e002e6d35d9967ef
SHA512

7b12121623d6a38d72586a48071397de9b9ad2cb2178aa6e0d8af0a4bc8dbb31ad4c53933dba21d6c69272602444101d8dbf4ce8a1983bab73f291d229fb0a2d
SSDEEP

6144:nPi2IT+UM3Xyrqykeeb6sYrnLeFFrlkWNibEuhVLF2Ql:PTUpM3zeeb6xrnLeFfvNSVB2Ql

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e4b8e64ba6493120c7728bddc844e628

Files

e4b8e64ba6493120c7728bddc844e628
.dll .pdf windows:4 windows x64 arch:x64 polyglot

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

WerpInitiateCrashReporting
WerpInitiateCrashReporting11

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 208B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 127B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE