Wmlaqvafi[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Wmlaqvafi.dll
Size

493KB
MD5

bb5b6594b536ec127a737fa97394d36f
SHA1

7679d00e76295cf350e6d1e05b601c24176a400e
SHA256

ac548e8e3c526bdea0e7a1c42432e6e33a375443af2c4827155c952b6b0952e1
SHA512

332eaeb4c1d15470c7822868c27e22ca27fc011c39995725b26ae34a424e5844ec39976f7343c954e1c43ed688fbd176a490f087e4dfde48e13edbc7b0ce64bd
SSDEEP

12288:dGvPKjsIhAX8uiQXOf7dremWBcJp66hAow:EvPv2onDezEm6w66hAow

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Wmlaqvafi.dll

Files

Wmlaqvafi.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 491KB - Virtual size: 491KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ