bac61dc4eff3316ef9ddb540b5eda5b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bac61dc4eff3316ef9ddb540b5eda5b2
Size

27KB
MD5

bac61dc4eff3316ef9ddb540b5eda5b2
SHA1

ae5faf50c13fe3d1e86f939a0d19c4e1e171e35f
SHA256

21fc45a6dcb7b303020822c1c5066f0ce658a1b64a939e5363e9a20a1edb37dc
SHA512

411dcdaaf188cf755790661bc1f40b2986ccb0d93af7c88113977f5a731e873e90401a8d18a9d51925a0cb85a1cd561549fc4e21a81f482cef25cceb53ca9b7c
SSDEEP

384:2X6njRUpqFex27HzkVae7CSfm5Ahq0+LRla9SWO:fnjRUpqFex2DzkVP+Se29y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bac61dc4eff3316ef9ddb540b5eda5b2

Files

bac61dc4eff3316ef9ddb540b5eda5b2
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\users\user\documents\visual studio 2012\Projects\ConsoleApplication3\ConsoleApplication3\obj\Debug\ConsoleApplication3.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ