sc0pe_extracted_pe_0[.]exe[.]dll | Triage

Sharing

General

Target

sc0pe_extracted_pe_0.exe.dll
Size

50KB
MD5

8bbc7b8bf97fc927cb383bca7d0a794c
SHA1

a2b2d9cb3435f205687b955712628bdabb0cd3b0
SHA256

fe14b946dd8cd5d7b518baafd0fbb39d244e9453073b14388a2764c29562c0ce
SHA512

cc1881e76464cbe15f66423c15b1f143d8e9c56f94b4b0670d062ba6da47e524a4d93654811583d2b0d7f88224bb21dbc0bef914ed330611ddc211f77d5e5a20
SSDEEP

768:/udOaL4JC+VMxjHwPEjxn/HsFgeZvKmJJ5Yu+x/2lJ2+zOrbJneq+0/2fU/l:/udO2NjHwPGlWrZ11+d2lo+inJC0ld

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sc0pe_extracted_pe_0.exe.dll

Files

sc0pe_extracted_pe_0.exe.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ