8f48b05377a96aa2c06f42503afbf842b1443aeb4f1118eacbebfc9f03a22443 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f48b05377a96aa2c06f42503afbf842b1443aeb4f1118eacbebfc9f03a22443
Size

19KB
MD5

3adc610b2e3c104fa811d0f86914ae4f
SHA1

e3381e084d7a4e19aadfb12b2e82653bf264455e
SHA256

8f48b05377a96aa2c06f42503afbf842b1443aeb4f1118eacbebfc9f03a22443
SHA512

2b4fec42e9ea576d52f9fbd83d203ac06698d511b92b051a64fccc51870c897d017b334b459cf5fb6e98fbdf047f732dd6bb300f7a75c32bba7c3d9f23ea03bd
SSDEEP

384:NN/aIV41H//jkPg/FYOevePPPUUPPPPPiHUUPPPPPPPPPPPPPPPPPPPPiPPiPPih:NNdVUHj8olev06Y9E6H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f48b05377a96aa2c06f42503afbf842b1443aeb4f1118eacbebfc9f03a22443

Files

8f48b05377a96aa2c06f42503afbf842b1443aeb4f1118eacbebfc9f03a22443
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

GetCommand
IsClientConnected
RaiseEvent
SendDataToWebService
Start
Stop

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 225B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ