download[.]dat[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

download.dat.exe
Size

10KB
MD5

0a6ca51f247d40796185e838cbd29b4b
SHA1

97ad0207f6cb9766e4d360b72459691b57ce55fe
SHA256

aaf5443987fb89af94a6f85aafa88b7136b050a8af4fdf3ccff864d81113eb93
SHA512

cfa6bdfc3224425d4209504150005054a53583ee972078ea5dd2fe84a0ef5e204c4cf950a3f84bbfcb1e5c685afefebcdc1ceb4d4270305846cec5fca9dc88a3
SSDEEP

96:efa9/77B75lLUq7B75lLUeSablWobUYtseORaok4xBnsaogpjel6P4aLq0tV:Ya9/77B759r7B759FvAouk4XAgpotah

Score

1^/10

Malware Config

Signatures

Files

download.dat.exe
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ