c59bff64c70d9be0f937e97bdec2613bd65d9b2c514395a75fe3fc823200d3f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c59bff64c70d9be0f937e97bdec2613bd65d9b2c514395a75fe3fc823200d3f8
Size

1.2MB
MD5

f10c88f90c257a867a21275bda9a8196
SHA1

27dbe48d6cdf9811478ac81a30d9563c366a1272
SHA256

c59bff64c70d9be0f937e97bdec2613bd65d9b2c514395a75fe3fc823200d3f8
SHA512

1ac0e74dc22df937167f74b28b29e59a5a6649b57ead2b657329f459c474db6aee651ad89e2a9ee9284ce648e8dac2ddb2b26157400cb649d5863d363732a4be
SSDEEP

12288:VKJWBE1JA+Eiadgus6c0JOwz5sp9a8wzAShzZwCtCl7j:f0QxAShNwCtCl7j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c59bff64c70d9be0f937e97bdec2613bd65d9b2c514395a75fe3fc823200d3f8

Files

c59bff64c70d9be0f937e97bdec2613bd65d9b2c514395a75fe3fc823200d3f8
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ