dc7e8aae58ea3d5618b266740c8a9fb070d2ddd334c9d0f9806408eb848a68e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc7e8aae58ea3d5618b266740c8a9fb070d2ddd334c9d0f9806408eb848a68e2
Size

450KB
MD5

b203d0de2246cbc5e4c810ffcb51e682
SHA1

37c444e8f58a3cfc73be81ac0ec7db0d25b2e989
SHA256

dc7e8aae58ea3d5618b266740c8a9fb070d2ddd334c9d0f9806408eb848a68e2
SHA512

e99e64b4af17cf9acbe0526ff8a4b13eaf00ab9f70d3a8f6366d2617c9705ff300effcf60078a219a72d3dc433dad2916e2af1ebd591c0b9dd188393ffb71f7e
SSDEEP

12288:QJ3U+TtzUsLchU7Z71BRpfqM01EpoFo24LYvnA:QOItzgqnBjfqSfM/A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Dlkmrqby.exe

Files

dc7e8aae58ea3d5618b266740c8a9fb070d2ddd334c9d0f9806408eb848a68e2
.zip
Dlkmrqby.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 586KB - Virtual size: 585KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ