0c6fec239a33864acdd558de506c1c3a | Triage

Sharing

General

Target

0c6fec239a33864acdd558de506c1c3a
Size

27KB
MD5

0c6fec239a33864acdd558de506c1c3a
SHA1

99348e8a396e8ad8572c698e9305adeb2805e618
SHA256

4174c59dd51eaf62caeb6a582517f14aa87d07eed564b54ded414b51753ec6db
SHA512

170defa9e23e21d268fe0e5048158396f1eb392d4caef67a00a1c81ca2cb547bfc7db75702ceec155e845a8d2df01f31a154cb0e31dfc848446c3db47cd17a9d
SSDEEP

384:p+QOgip7cDiIfGNXSCi9CnMx1H/Ewu8q:p+QOgip7yVa5AEwO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c6fec239a33864acdd558de506c1c3a

Files

0c6fec239a33864acdd558de506c1c3a
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

!U#fE4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ