b4cd1608a79d82a3d15b6158f9878ef6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4cd1608a79d82a3d15b6158f9878ef6
Size

60KB
MD5

b4cd1608a79d82a3d15b6158f9878ef6
SHA1

cbf05044ccacb5253f8c3fb44085de18e513ef86
SHA256

191740cd8adf99ada21647f6ca7828c689ebb2abf8a18343ae225170605b5cfe
SHA512

a67e26fbb946c71f55dc5b4edd9e8fc137a4ffeb81f6dbe75264598c3f7bf18b3fe7fa2324e901cda7110f65560fc0f2b0d2ac45f70fe19c6995cb3c7ac36196
SSDEEP

768:4NInenFDx9F1AkFqaUIcnGW6sZqm23jtkMCM+Zyw2EsNnIptAtR0Yv7Git0IltTb:4pFMIcn/6n/ZkndZyw2EsiDErt0IfpR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4cd1608a79d82a3d15b6158f9878ef6

Files

b4cd1608a79d82a3d15b6158f9878ef6
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

App_Web_outlooken.aspx.f5dba9b9.xjeoznym.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ