841a406d69fc39b9103360db6b68a85ed6ef3edd5a9fe044b6485c65a690e272 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

841a406d69fc39b9103360db6b68a85ed6ef3edd5a9fe044b6485c65a690e272
Size

340KB
MD5

cb254d91ee8c0abaa52a70da665dbb16
SHA1

e2a0ba5a8c2724287bfebcaad9269d72eb6e9ce2
SHA256

841a406d69fc39b9103360db6b68a85ed6ef3edd5a9fe044b6485c65a690e272
SHA512

0cf9966ceb6b87762ff8da8760a811c5292d0876085ac7e2534662e2695a5ddba69ee58874aad1d9df9a3dd4d3b99c33e50323f7726279a13a31b35acb8ef06e
SSDEEP

6144:34TwKXLAUdq6h93VMQjKbnZMK0Rw3usrUxNCjP:7h6TlMZZMK063uXNe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
841a406d69fc39b9103360db6b68a85ed6ef3edd5a9fe044b6485c65a690e272

Files

841a406d69fc39b9103360db6b68a85ed6ef3edd5a9fe044b6485c65a690e272
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 338KB - Virtual size: 337KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ