AlphaClientBeta_protected[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AlphaClientBeta_protected.dll
Size

1.4MB
MD5

f1daec6c50ff47f48881cf3301ab5996
SHA1

e0d964a533e7d2ae7d961d998b2d36582be1f8cb
SHA256

84ae7a59271926bcd84146ff53280700d21533522bfead52210b9738e800fe80
SHA512

b6efe3c29b08863a120597fea9b1d41700e608aa480e59000a51c3b8534b32c8d2407ceca181f54835b3b791a21365d8f1e69f25dcf3f24fadb58867f38cd373
SSDEEP

12288:bTUsNxR2AwKoDRFLHhhOREvK/HT2pR0jSuvps66HD:ZIAR+1BPhKs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AlphaClientBeta_protected.dll

Files

AlphaClientBeta_protected.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ