f4ffabef5643f6c33590605e92bd9e0d42a3786816fa3eb579072166c8552a22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4ffabef5643f6c33590605e92bd9e0d42a3786816fa3eb579072166c8552a22
Size

14KB
MD5

b5405c38052f2b1c0ef398687f5ea592
SHA1

1eac234cb1c95c15fd8f442d0ae1a29977d8701c
SHA256

f4ffabef5643f6c33590605e92bd9e0d42a3786816fa3eb579072166c8552a22
SHA512

73b093fdfd8d4bfa09f0b665f300f0a29780a36358f731307637d6c881224bef6672fb0e4810040c89cf2e9850a369ca23a8e7512e3af004198a46e47f740248
SSDEEP

384:FjNXriLZ4/rgD4/r0WOc4SzZf3eiogszu9vsJKqnDtexOtKX:5XhoNQvsJKqD4xOtK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4ffabef5643f6c33590605e92bd9e0d42a3786816fa3eb579072166c8552a22

Files

f4ffabef5643f6c33590605e92bd9e0d42a3786816fa3eb579072166c8552a22
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ