sys-mc[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sys-mc.dll
Size

40KB
MD5

79d03c2e1b5bfb85fe3113a422ae7810
SHA1

dbd92f6c7c100a2ef8cd7c660d0a5d7402a9380e
SHA256

0597b2885e9e819b9883723c4518e5f9111b6879caf3de5ac47b42b71c32b657
SHA512

4ff36d25a2fe5ffd909c5d33804a8c7165e3744555581af2fb2dcf98280107d46aba515bc15d22825271a25f012ed50764cc4b3a4017bdc1e99c0de83c9deb3d
SSDEEP

768:YKhzsh1ETuMGtwNyn7wd2B7O+myJZh341/9d:iETuMGtuZkBiUO1F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sys-mc.dll

Files

sys-mc.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

do_ShowWindow

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ