payload | Triage

Sharing

Copy URL Twitter E-mail

General

Target

payload
Size

402KB
MD5

6f4dc3812b6f008b4e871fb1492a65d8
SHA1

762eae9f39d263fa9eac5d4b5b568492558bf6f2
SHA256

508dbddbcc942296c503d344bd132309d3b8d7201227cf1a74704796db9ce1db
SHA512

17eb9c9dae91ad17717699bb0a63c6691d47f1b984d941848e8799a8f1c3e8d4888225aba6c23c305b2f9515e38e45355c3ae6afb16556bb7347a04b452934d7
SSDEEP

6144:sJOzV0f9pCANa5NqsmkCzpPXtEJf2DZPQBjmgE76XZYX8JMfNYZ:mOBY94j5NqsmkCzbDZPy4IYMi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
payload

Files

payload
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ