5041b5b381129b244df3bcce3dbc6305b2d289c9357426dc4f720c11e060f10d | Triage

Sharing

General

Target

5041b5b381129b244df3bcce3dbc6305b2d289c9357426dc4f720c11e060f10d
Size

237KB
MD5

0a38e81ea33ccc645f1588398f71a043
SHA1

9b73abc9b17d1db79dc3d9ddb0b1583933f422fc
SHA256

5041b5b381129b244df3bcce3dbc6305b2d289c9357426dc4f720c11e060f10d
SHA512

27752978fbd38d296e6ce8b0c42c1de6cdf86c83e017aa297c3aec7e9a3166fceea7e44257feb411c1c745f7d0a7a68cef33ba86d0d5384d1d164a71753b30ab
SSDEEP

6144:2iFdGVwXZmuFuVwXZLq7h7QmelbP35Yde:DJBJOL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5041b5b381129b244df3bcce3dbc6305b2d289c9357426dc4f720c11e060f10d

Files

5041b5b381129b244df3bcce3dbc6305b2d289c9357426dc4f720c11e060f10d
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ