6149314f12094e79034708e8a5b8da0b | Triage

Sharing

General

Target

6149314f12094e79034708e8a5b8da0b
Size

101KB
MD5

6149314f12094e79034708e8a5b8da0b
SHA1

3c9dfbfc0867aaec94835a120204d67fe8e8a5f9
SHA256

ce747fae7e409e3eb45b82fae08f7fd60743b0f0f8276a8c23b53652fa779569
SHA512

2fc5700a13c8cddf5c746c2a4fa4f4431fa5971ff653bba61a74ae125039fa852b80bee13559f429dc5196f0e1fcefd169a807c59c88b88629a70bf60994fb3f
SSDEEP

1536:cpvcUXawxiq2XRoZhwyrODBK1eNumLlmQuIeXcc3ItxUvAoeIF:4vcUq6WmoyrODEob3uhcgItSAoeIF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6149314f12094e79034708e8a5b8da0b

Files

6149314f12094e79034708e8a5b8da0b
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

z4WTTT2i
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ