de3a9bf66d7ef4ea6930f1ac3c6eaedf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de3a9bf66d7ef4ea6930f1ac3c6eaedf
Size

14KB
MD5

de3a9bf66d7ef4ea6930f1ac3c6eaedf
SHA1

23d5d2ac962b7dce7152f5a391857a594a86b4e9
SHA256

e4e6924f068ffdfe12b8aee019de41246b8ab32b5c5bf1a8f99803bab824662c
SHA512

51a30b576556a775a28ba5c476dfa53a49669168280fac15f7d630f48f3db3fba2069eeac65309a42e4edf2eefc57b72a683b1a226cf22fb386db58c891f791f
SSDEEP

384:qL+5TpzYenF0puQxuCTE+MDtQYkYfNH1IkrwEAqkZ9kcSr8c6vokjt:lp8enF0sQxuCTbMNE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de3a9bf66d7ef4ea6930f1ac3c6eaedf

Files

de3a9bf66d7ef4ea6930f1ac3c6eaedf
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ