2ff93bc224c11156b1b22162dd579a3b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ff93bc224c11156b1b22162dd579a3b
Size

188KB
MD5

2ff93bc224c11156b1b22162dd579a3b
SHA1

4d9c834e52510e978cf7c5fa25a2096e823459fc
SHA256

f389ae17dadf1f5fd73fb9d1a8399cb38ffd1d1c12b145437033fec341b62ba3
SHA512

81ead29d6b40a86466d51e5abae4700589fd7953b78d49cb7e340488afcf5ac92b0a88a801570a77165d3a245942c032231b87b896125cf46c8835d15dbbb488
SSDEEP

3072:reizJOS+XML9NEfpZyaECUHAbyPrRXSJMT+e1yc7UptXHyWmrzn5wOwnhHmL0:re4qZWG09ahHmQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ff93bc224c11156b1b22162dd579a3b

Files

2ff93bc224c11156b1b22162dd579a3b
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ