11c90000_d97792aa15d21071 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11c90000_d97792aa15d21071
Size

256KB
MD5

f1b1094c69d68be5f7752c5892e724b5
SHA1

5491a6ef887ba90da6f2c0adc50672bb23f9e5a9
SHA256

d97792aa15d21071d3cf08180e62880030642bb6da41af1f59daaaffd5ca2e60
SHA512

8d4c20001a9b1a0fc4263d0f985a3ca41bdceadfe1084ed46ed0f112e6e85c648c5b9da13acca3afca358bcb661abadddf7fff5d6d3185dd256bf08edda3efbc
SSDEEP

768:MQVqqqUQb6lfzOunFTEhAGnAO0lpAgTzls+/KX1yyfdcbiobNl/7kSvoobYWCEFU:MQVFTQ2lfUAOeTgq3bQRomF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11c90000_d97792aa15d21071

Files

11c90000_d97792aa15d21071
.dll windows:10 windows x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ