b652ba9df338ffb7abfd5fb21130ff51 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b652ba9df338ffb7abfd5fb21130ff51
Size

8KB
MD5

b652ba9df338ffb7abfd5fb21130ff51
SHA1

50bfb3d5f89e566aba15a70a2b0fa50ac4d77c65
SHA256

a989eb91875ec9e701aa26837dcbb03e5f2f549b8d860f1c3e7fa023be722203
SHA512

a685fe7a8be1932cf227ee8f9586b3f3cb782380619d7e89ca9f6aa1f46654541bdf49da62b95496930d66a026e5be197d67a8abc96c91cb5ba14776c7d13f3e
SSDEEP

96:ZIxwdSEuhr2IX9Blb5GkCrgrCb/gPxrQ8yJxMbXEQQQcSChkLvXImDlpM3sIS:R+AY5GkCrMCb/gPxrQ8hfQpoLv4OMW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b652ba9df338ffb7abfd5fb21130ff51

Files

b652ba9df338ffb7abfd5fb21130ff51
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\e6c51c26\839f3546\App_Web_kfyrrnkr.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ