2b0edd1bbacd6a52a3d2a1e7d93a7f00 | Triage

Sharing

General

Target

2b0edd1bbacd6a52a3d2a1e7d93a7f00
Size

269KB
MD5

2b0edd1bbacd6a52a3d2a1e7d93a7f00
SHA1

817e2e73b1735f453e0cc124c7726199ebbecc45
SHA256

d4158bdea72aa1bbb492ae35869c15800ba3aa7b5d3774706335a29e198537bb
SHA512

c9baaf9438288a0a9fff4b07bba3819a13c242b30b93ed8f3dc354eb89b1b029c3ca5b78983d174e699710f8d5ad93e3163a5ef628c476100e6e50c64dafc62a
SSDEEP

3072:rio4xIdfILDpFYoe0ivEoqDOlgQITefbmCNqpn+Em4UcMOm5DJzB+P7RiqcP4iqX:m6IOtsiwdwlBl+PNiqcPzu4p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b0edd1bbacd6a52a3d2a1e7d93a7f00

Files

2b0edd1bbacd6a52a3d2a1e7d93a7f00
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

DbgMoh_Prib_svga
pncws_Devcclby

Sections

.text
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ