1b878e52daba407df0c264815407ef35 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b878e52daba407df0c264815407ef35
Size

9KB
MD5

1b878e52daba407df0c264815407ef35
SHA1

941fc99880cef42526615721c3fcc57bc988b2a8
SHA256

f301e9ef14cf7d8d9f8d7e1275e79a90c7d2b45349bb306c6f4f404d8432b0ad
SHA512

9ea0020aa8b0dfe160f62386f6ddf272ea190a97335350b31e5ac52f0bd1626fc36f933250ea97f3f64b7f832b6a6993c1880f2ca30f6af7c8fa77058298dbd7
SSDEEP

192:+q+JDT0mEmze3ofTTcs8ue65O+Wi0Exk/5:CJD4nie3ofTTCl65ewk/5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b878e52daba407df0c264815407ef35

Files

1b878e52daba407df0c264815407ef35
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ