4993a7c717df81c867cce1dcb70969156cd45a0d8586a108fb8c1ba3e930bdbb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4993a7c717df81c867cce1dcb70969156cd45a0d8586a108fb8c1ba3e930bdbb
Size

8KB
MD5

6caf9dea8a195bf49459e5fdb203dee5
SHA1

6cfb42125918b964cd120d0dbded8baf26c50e9e
SHA256

4993a7c717df81c867cce1dcb70969156cd45a0d8586a108fb8c1ba3e930bdbb
SHA512

befbacb84ed21d60efd8513619c29358eaffcfef66b18f042b38a8de47273dfc9d3a89addb0a497176fae2ac26acf396b9745d9198791efd3b5a73794882dfb6
SSDEEP

48:6D6qUd3/k6SKfRYfo94gcEaSxLb2YcX9KTSX3Ex4Y773dFF7qyHP+kisn2Hnyg7k:eUd3/B3PP9koTywLh/D3h3gDn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4993a7c717df81c867cce1dcb70969156cd45a0d8586a108fb8c1ba3e930bdbb

Files

4993a7c717df81c867cce1dcb70969156cd45a0d8586a108fb8c1ba3e930bdbb
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

RsaDecryptKeyExchange
RsaEncryptKeyExchange

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ