66bcd13799a6ffdd4c97767e3c822f7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66bcd13799a6ffdd4c97767e3c822f7b
Size

15KB
MD5

66bcd13799a6ffdd4c97767e3c822f7b
SHA1

7544237c5f3a5e18182b16db051a6c91b57fc569
SHA256

58a33219fa9c63e715ecd80f1b09436b6c15b3b4e607ae23de53bd6a203a31ea
SHA512

dd17f10261607c7f7329da29af9fbc9fa054e4553e0294b85a3a5e6e4c241e92c6661f081953b17eae575f051bc550f55277b958d17f1ceefaeaef542f8324b3
SSDEEP

192:yEHZ8+n1XVbIirQLBZoo8IkxnjddeUXqUk/9rz1GM7Am86viyJnf5lwiF5Q:/8+n1dIiroZj8Ikxn5Up/ayyylTY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66bcd13799a6ffdd4c97767e3c822f7b

Files

66bcd13799a6ffdd4c97767e3c822f7b
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ