stage3[.]bin[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

stage3.bin.dll
Size

1.4MB
MD5

7fe7bc5f3071dbcedf948751c318c341
SHA1

de33b3920bf847b133eab5006e32fc8562d819c4
SHA256

5344fdd5ac0436f1da4ad8f03205b543cfc054a5e6387361f7855d7eb08cfa2c
SHA512

17594063491d4ff31c90a093c31c086113739c0d6e8051d5bf7d59d9dede215798386f8e465b4c22e0ff5729d73845af2d90cc6af4e417c92612d10a4019c86e
SSDEEP

24576:UDMBF8Xw1nCyIP1zmCdZQeXVHer/6SKcvTHCWTfND8qA/vAEXNhqgC:USssrIPwk4CgCSf11A/vAEXNk

Score

1^/10

Malware Config

Signatures

Files

stage3.bin.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ