54f6ecaeb2db54a3af71d5244b6c3f6e | Triage

Sharing

General

Target

54f6ecaeb2db54a3af71d5244b6c3f6e
Size

41KB
MD5

54f6ecaeb2db54a3af71d5244b6c3f6e
SHA1

425f0ec8a53f3bb8772fcbf7d68754d292f3d60b
SHA256

a4751fc24280078ff7022f035366164c1646f979e74c6fc3216af4d1fc1be140
SHA512

a7d17b788097909b5b15135edf8879fc5189d3437abc903740b37dd53fe5963d5a3363a4ec17da61cc96516dc149a394c43732c6714199b85a7b88552b151a04
SSDEEP

384:2n2ZwP3+Q0gTJmrm3XqUkwjhh/brb8AHDVVj51V6lAM07Y8zXFFWdX7fm6l+VOHT:2lPOQlTJj36GTTljVVj51of01F0rX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54f6ecaeb2db54a3af71d5244b6c3f6e

Files

54f6ecaeb2db54a3af71d5244b6c3f6e
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

IW[egU
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ