Elsify v3[.]dll | Triage

Resubmissions

02/10/2022, 03:31

221002-d2216ageeq 3

Sharing

Copy URL Twitter E-mail

General

Target

Elsify v3.dll
Size

746KB
MD5

624eeed6e22c1ed3a1ecf18f9433f714
SHA1

04584b2113292586b74ce706d87adcd7575707a1
SHA256

5bcf771443be120bf3013078371f4ce3c0338fd19c4a08eb6c9002d03ba3be9b
SHA512

6d4605cf9ae8c3c20ec123aa48fa4535cfe964bc82eaae815113e812e7876a2cb4cbfa075121316ae4eb975db5c3b268a7aeb9059d0ac0134dd9db0dcf220bff
SSDEEP

12288:MWBXGMeIa1XbRktGnWg7sLWAV4fsnO+TTXo+PRkxGnWg7s:AzXtktl9Owpkx

Score

N/A

Malware Config

Signatures

Files

Elsify v3.dll
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 277KB - Virtual size: 277KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ