sc0pe_hidden_pe[.]exe[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sc0pe_hidden_pe.exe.dll
Size

31KB
MD5

de906fce89f615f303ddfb80c1b37b35
SHA1

3568e3f9f0731da9a3294f4f8de61f95dc3eec31
SHA256

a518e0fddabae1e59f933566cb54e592331404d5362976f3ef81a1432dac4ffb
SHA512

0a6ddb52eac9f4d1317eebafabf20e2189af4a9067409726c2a6b8091bbd5306aab6ee8c96a47c045fd36cc1e7d7be457144cabbad233931d7c3adebe6d33127
SSDEEP

768:Kss2m3MRLno1Zbwnfel+qSGGDNiuk2Gb:Kss2EMobwnmUqfGD1g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sc0pe_hidden_pe.exe.dll

Files

sc0pe_hidden_pe.exe.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ