50e99091a0f5f81992e3290c1d8380f61132232f356bc127c7da773e02c9efb8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50e99091a0f5f81992e3290c1d8380f61132232f356bc127c7da773e02c9efb8
Size

6KB
MD5

6e7478815fbf75fdd20fb83dd4f58d44
SHA1

643c0e0b81ff2e52f5fe7e9641e86c17f0f537ae
SHA256

50e99091a0f5f81992e3290c1d8380f61132232f356bc127c7da773e02c9efb8
SHA512

7aed1f41856fc7aac621826ea1c0f84b24c07f7f73716e0134adda8842ca7a9673f3c83a53bc9380211f441c3798951b966b9b4d79f687cbe10c9439c39e21c0
SSDEEP

96:nH+lj9YDhx/cHyTqc8AUbCC+Arz886ptJOBOJobUw9YhZK:nHQYb/ZuF2A886pJDkL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50e99091a0f5f81992e3290c1d8380f61132232f356bc127c7da773e02c9efb8

Files

50e99091a0f5f81992e3290c1d8380f61132232f356bc127c7da773e02c9efb8
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\temp\tayiiqiu.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ