f81cf41c033dd800b4417bafb6713964aaee53b9b7839768ce6565792c779442 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f81cf41c033dd800b4417bafb6713964aaee53b9b7839768ce6565792c779442
Size

14KB
MD5

cd7dd6ef711022fccba9876c9573ce03
SHA1

0986c4cf8bc7b64d82d03c691fb5d8358a4450dc
SHA256

f81cf41c033dd800b4417bafb6713964aaee53b9b7839768ce6565792c779442
SHA512

aaced4bedf1641fddc51d63a0da8dc6cadcba605660383614d7cacce3ebb812c1372af10b857f047e95a94fefd0fbfa9351abede8364b698f4b7c09fac189576
SSDEEP

192:ZLLo1ZbGKyPQfImygWKu3IHfp3BP4JYvAoNAHkKiiS2pZM+EEEEZYvAbEAdR:ZLLiyYfuQuo5BQWbNDKiiSG2AY6dR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f81cf41c033dd800b4417bafb6713964aaee53b9b7839768ce6565792c779442

Files

f81cf41c033dd800b4417bafb6713964aaee53b9b7839768ce6565792c779442
.dll windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

mono_aot_file_info

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ