0300698e880fe244e199bfabe23c9671 | Triage

Sharing

General

Target

0300698e880fe244e199bfabe23c9671
Size

246KB
MD5

0300698e880fe244e199bfabe23c9671
SHA1

20013dd7250e1385bd027dbf90e4ec093c2278fb
SHA256

0edbe6557d42dbc310e0298c63a97d6ff7dd3afc786745f4bcdd52878a456bfe
SHA512

435ed2a198004b3492e0a8b97405f1f8c61cbcbeda9700cd42af934e46ca961269f6a957c79775eb68a73d272bb614e6ace44ee51d5cbcb0d842f1b17f9adab2
SSDEEP

3072:j4agu2gdU796lavDByTmJBP0UBbg72uOYWZtEM78thVc+c+DTBwS9Zop7S9FXw:j4juqolavDB3Jh0U5GagPrpg78X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0300698e880fe244e199bfabe23c9671

Files

0300698e880fe244e199bfabe23c9671
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

CIBFlC_WJ_v3_0
CNBPowp_Djavfi8
PkewentotionQrrz_bagtery_evenis

Sections

.text
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ