ef6cc9f8843e831459614a8e9aeb45e761b9e02764fcdd0126fb31a492d678f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef6cc9f8843e831459614a8e9aeb45e761b9e02764fcdd0126fb31a492d678f8
Size

29KB
MD5

86785a02352d364f69f15aaeb8c22e94
SHA1

a0c41701175804edfca453ffea7a771635ab7182
SHA256

ef6cc9f8843e831459614a8e9aeb45e761b9e02764fcdd0126fb31a492d678f8
SHA512

501fe342f721d504088417f518de9971638ac0456f85d6af2e44d6aaab20c77c7d5589a24b3a8a66c944c2a125d806988d48dea5b971cc5c384a1abb4434d515
SSDEEP

768:BfxsJ87dkbY5q/IDbWKGfktW2Xmhq1HA3:pm8XUKXGfWzm4hm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef6cc9f8843e831459614a8e9aeb45e761b9e02764fcdd0126fb31a492d678f8

Files

ef6cc9f8843e831459614a8e9aeb45e761b9e02764fcdd0126fb31a492d678f8
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ