b999fbcd0ad395678db05bc194768ac9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b999fbcd0ad395678db05bc194768ac9
Size

133KB
MD5

b999fbcd0ad395678db05bc194768ac9
SHA1

794c0bee1604a63fd0d202883942914fb26a4f84
SHA256

a48824ecb749a2c82ffada2e6d8678da2701f25057dfecc6dd4396dab0fba7b4
SHA512

681cdcdf983ffdd690c8b03263b422211e1f4cd94f031599648ad85a72a146b82b988886473c6ae5350b030f65519ef17d34a4ae4456c7ef29ca1f53c84bc334
SSDEEP

3072:OPBIe8cGJN1wtVXikG7lh0SJMT+6KUzaUpyQymmrBBsqVXPyfsXAr0abG:IGJNyNQlG0y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b999fbcd0ad395678db05bc194768ac9

Files

b999fbcd0ad395678db05bc194768ac9
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ