796b3652a9290b370c3dc8b6bbbae0a6f277a3172dd788ad66a9b432f34561fd | Triage

Sharing

General

Target

796b3652a9290b370c3dc8b6bbbae0a6f277a3172dd788ad66a9b432f34561fd
Size

64KB
MD5

6dd9efaada6b6b640c4b563389a848e2
SHA1

6c7727ee86dcc1ecc705147995199dba6aa26a40
SHA256

796b3652a9290b370c3dc8b6bbbae0a6f277a3172dd788ad66a9b432f34561fd
SHA512

534f0645c37ed26a7abec234181c820a0b97b9c7c63dd7fa11048cbb77651d31a1df74e999289d14a4ad33c09e7bc8cf78a38c82ca90c7fa44473efc1497b1df
SSDEEP

1536:MsQT1ope6JEgTpGmaZqMWuDu/nI53E+YJ7HdgZRJ:MFhEeNgTpGD4MWuDu/lHiZRJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
796b3652a9290b370c3dc8b6bbbae0a6f277a3172dd788ad66a9b432f34561fd

Files

796b3652a9290b370c3dc8b6bbbae0a6f277a3172dd788ad66a9b432f34561fd
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ