c379eff23f1c299945faa7a5c3f590df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c379eff23f1c299945faa7a5c3f590df
Size

3KB
MD5

c379eff23f1c299945faa7a5c3f590df
SHA1

1a4afe8fd6d8bb9af6d56688890810431f18d144
SHA256

93b8c9ead363c09c67234732f5eb6f4c52139ea1120a529109235a579a41976f
SHA512

9985128dff836d7bef4c8e9f9480646bdc6bcb9bafd741114a6b58bfa0d280ebf92657286cb3ff39b028b2b641204e13fe10dbeeee4915724e644dcfea10ac12

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c379eff23f1c299945faa7a5c3f590df

Files

c379eff23f1c299945faa7a5c3f590df
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Virtual\AppData\Local\Temp\ki32ogmx.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ