Dlefsliw[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Dlefsliw.exe
Size

170KB
MD5

8d357fd7be9e3be773bfefb19523719c
SHA1

1cdaad00b389174ab628d3e8f1204e08f78ec4da
SHA256

4475f3fe5a050106c08658e5d401069eddc9ae73a96ef32f579dbaea35c26211
SHA512

0f50a7f7276ce50227eb780958dd4f015b6f2034342616f6a9e32418fc8376d8eac1884787c4671e17668b930ee1623fc6f3942e14db26ac9e3e6a30eea322c1
SSDEEP

768:LWzRRTpFByG/mO7Qw0UYgDOZfSMYYUYUYUYUYUYUUY76A7:LWzRlBn/1IgDyYYUYUYUYUYUYUUY7P7

Score

N/A

Malware Config

Signatures

Files

Dlefsliw.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ