6afe6a81315cb958ee185a29465efa86[.]dll | Triage

Sharing

General

Target

6afe6a81315cb958ee185a29465efa86.dll
Size

901KB
MD5

6afe6a81315cb958ee185a29465efa86
SHA1

8efebe3eec367c32ecb61940af7dce6db17f8c8a
SHA256

5dd72236be3ec2c844aa4d33f9dea29884b78adf0d27ae6acdde08f7212a175d
SHA512

6b568ca0063d268df2e903966599edeec10cc30eda83b17ed782301f43d509929ea8a73f86f3d991bfce7210e75a104dd7b8c4372779cc75e440ce4dff53701c
SSDEEP

12288:kdWxEqX46DR5KDIQOxFcJam833G3sjl0Bdf3OBzRhkZnfPx1V4tZC9yNddopxNKu:rxlX46D7K2joam87Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6afe6a81315cb958ee185a29465efa86.dll

Files

6afe6a81315cb958ee185a29465efa86.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

GetInstallDetailsPayload
SignalInitializeCrashReporting

Sections

.text
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 645KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ