sc0pe_carved_deobfuscated[.]exe[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sc0pe_carved_deobfuscated.exe.dll
Size

26KB
MD5

722c0891c3559e9fd76a00ba85a4d92e
SHA1

39bf373e43ecebf54d8f927b7b9bca4084d5da68
SHA256

53f4e008f2f48d75da3dc62bc30335ee94efee15e95468d89250ce6ed6aa3593
SHA512

5b3e57270b19706101f6a5fcd4eb153f01ee4ee8af20e9ed0d9fba5c4efa61e6ddf238a8b8e2e293a9af97e9f8d860509399468fd9faa7eb3414267198df28ff
SSDEEP

384:TsDrW8by0/xCQsPI1mGxycUzKNJmr4tbu8dG3FCNrtJfgU8Vnw7XkVj1F:T6/xYQWycuu8G28RT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sc0pe_carved_deobfuscated.exe.dll

Files

sc0pe_carved_deobfuscated.exe.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ