d79688b2ef691c28d2cfe3f450eadfd811c1569d38c9e63c701685ab50064a4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d79688b2ef691c28d2cfe3f450eadfd811c1569d38c9e63c701685ab50064a4b
Size

21KB
MD5

27a030829cc9f37c14f8034a9300c1ba
SHA1

f7e18a551aeae3998547c5b90515ec135c7b25b0
SHA256

d79688b2ef691c28d2cfe3f450eadfd811c1569d38c9e63c701685ab50064a4b
SHA512

5b4561af29b6d1309acd2357ec8cd5f006061dcea8bd6fa2ec29bf701616288d1ab8db23aea505d6683a261dc65df89e8d5690c4ac590a2bfa31ed8db40a1874
SSDEEP

384:2OSIrYkB48NV5KyQVfLbnJ23Xc3UhL81wxDxo9pMfWT:a+BlNOXfnY2UDFo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d79688b2ef691c28d2cfe3f450eadfd811c1569d38c9e63c701685ab50064a4b

Files

d79688b2ef691c28d2cfe3f450eadfd811c1569d38c9e63c701685ab50064a4b
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ