169219854439ca6210ad19166ffd0b0a831da93535b1c2d5bc62ad735d3361036f1aa68164651[.]dat-decoded | Triage

Sharing

Copy URL Twitter E-mail

General

Target

169219854439ca6210ad19166ffd0b0a831da93535b1c2d5bc62ad735d3361036f1aa68164651.dat-decoded
Size

3.1MB
MD5

540d3bc5982322843934504ad584f370
SHA1

304bffaf33ed57f8c381725cf22e0de9c90dcc71
SHA256

6b0a2617bdea47c4a673c02ebde8ffa709d4526cfdff9cf7f8502afc10da390a
SHA512

e6eb33c55dd8279435f5031d2a93dcd9407a8ddc2358ab93a081a3a3fafb0eda2c4eb27686699f419c9247468ec0902790207e8e6c9f5c4e9dfc4994429af5f7
SSDEEP

49152:6pwv/BkMfwpWaoH+yegep4Dpj7YVH+eFe4Ehj9l+ghSTeRG4BAxu:mSHocpjkVHB1+j9l+kGx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
169219854439ca6210ad19166ffd0b0a831da93535b1c2d5bc62ad735d3361036f1aa68164651.dat-decoded

Files

169219854439ca6210ad19166ffd0b0a831da93535b1c2d5bc62ad735d3361036f1aa68164651.dat-decoded
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ