fa4a020f1f540c31854d4fbc01d6e8946ea78d76e15e1bb3a420e08f8a35f6ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa4a020f1f540c31854d4fbc01d6e8946ea78d76e15e1bb3a420e08f8a35f6ca
Size

15KB
MD5

c64ca1d2a3c79a02801c64083f5b7d6d
SHA1

127c83c90b392fe06ad4775bc68870889515c3a3
SHA256

fa4a020f1f540c31854d4fbc01d6e8946ea78d76e15e1bb3a420e08f8a35f6ca
SHA512

f10fe14cfc7cead2f23d2350cc96de2956516448ef4af35b292da84eedad3cd2b0d8592c7c9457d667c940932b583ef595221c6d3ed3eca6fa5f7cde729f7ac7
SSDEEP

384:UZiXezkENfLePg1sb6XTyLtqLt4TpTmxOtKX:+iwlfLwuI8yIe9KxOtK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa4a020f1f540c31854d4fbc01d6e8946ea78d76e15e1bb3a420e08f8a35f6ca

Files

fa4a020f1f540c31854d4fbc01d6e8946ea78d76e15e1bb3a420e08f8a35f6ca
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ