testabc[.]txt | Triage

Sharing

Copy URL Twitter E-mail

General

Target

testabc.txt
Size

75KB
MD5

a4f09fdbbe17c8fa42feaec96af5aeb2
SHA1

bfbb25b9c5c71aa9dbb31aa8777b53b542eb7431
SHA256

35664a192de81b762331219cbd1bc62b3b590efb9273a25cbee7162e8925cbb3
SHA512

7ede84f00868535242b5851c6f81806b0bdf70f27054d3ea0adbc2bb579f9906005a737cede7c3b2f16f5e54cda94f6e73b6c83edba1ec5ed38346a7a8043884
SSDEEP

1536:u8GhxvleLdCqXOv7wWfz0H4jYGWKxhdvkptOvaVyAhm:izeRCqXGfz0H48GWehFkpAywim

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
testabc.txt

Files

testabc.txt
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ