054e635709fb2477a1c11adea3e0a22b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

054e635709fb2477a1c11adea3e0a22b
Size

16KB
MD5

054e635709fb2477a1c11adea3e0a22b
SHA1

02ffd18d68f954acdcdbfc71afbbcde698fd6bb0
SHA256

dd8b84236ade8429fab17364b4a1aa55a22a030b5dfb1fffe65c25556c2b8627
SHA512

0745bb5a9d22f46932623597634dd5dfb5f6b6d03557466f4f440d5c0f0f7e4fc3040e84bd1c7cdb607f1fdbfa4f2e081fcde144f862ff60c49c11d3764748d1
SSDEEP

192:Q/yIrGNwYNjQajE4rQQvIVu0tkpWjGe2ZNoLYXrxYNUit6Psh8Vh4hfuQhRzFgk:uGNDN8+f8LZ2PoLYXr2wPq87e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
054e635709fb2477a1c11adea3e0a22b

Files

054e635709fb2477a1c11adea3e0a22b
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 209B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ