f120ff2a379a71fb803327638cc51b182d61b0514f16c9276ff2d13f46b701fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f120ff2a379a71fb803327638cc51b182d61b0514f16c9276ff2d13f46b701fe
Size

100KB
MD5

14fe2621f7d11daade585188f0490431
SHA1

e226b77d05032b2242e745bbd2e5ff186bcd9857
SHA256

f120ff2a379a71fb803327638cc51b182d61b0514f16c9276ff2d13f46b701fe
SHA512

75d07da7b8cc53dc64fc13cc32d24d5fb2c3ab4ebe19af097546237dd8ae5985763bbaffb15c9b2bc4bc0258b0f5b0750fcc10c6ffd9a1170e6978379fc3403b
SSDEEP

1536:w3l3cWin1C/kNlFw1Tja9v2jil0HZAu7pGLlBp96jj:w35Rin1CcfO13Ifl0HZJ7p0Da

Score

10^/10

Malware Config

Signatures

Detects executables packed with Dotfuscator 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_Dotfuscator

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f120ff2a379a71fb803327638cc51b182d61b0514f16c9276ff2d13f46b701fe

Files

f120ff2a379a71fb803327638cc51b182d61b0514f16c9276ff2d13f46b701fe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ