file | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file
Size

1.0MB
MD5

0c541396beca394569d1d5e5fe1af381
SHA1

bc8f0e785133a9cd3db79fc3427dd0235cb8566b
SHA256

5761dd41539fef27884f86fff53618e68f7bb4fb389d470d8e7eab4cc1b14d50
SHA512

5f8ed88f78b81e20f857a110db473776a027fe3b387fe163953782e3659623d1cbc530414054b8c9179b61589989fe488617da29c7f9512ce30ea405e4a3f3db
SSDEEP

24576:JJrRXa0Ha15XNioyL3S/OeRagVW/uco8cicX9qnlGQTw9ji9jY:JJVXDVL8Agc0rNUG59g0

Score

N/A

Malware Config

Signatures

Files

file
.gz
sample
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ