b4ba1efa893e24d0898b755ac8860a70bd56c3b542b84e943e84affa9ec0e403 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4ba1efa893e24d0898b755ac8860a70bd56c3b542b84e943e84affa9ec0e403
Size

13KB
MD5

306d29fb1c2fd09b1b1bc4adbb79e12d
SHA1

0fd29504660035afd2c41c2c96b0f272bf0aff8e
SHA256

b4ba1efa893e24d0898b755ac8860a70bd56c3b542b84e943e84affa9ec0e403
SHA512

dd85acc6cdec33877569360db505a18334f7436a02c65b4ca25b39d3a71185122f2ecae4bca207e3c05680f1412766efe39adf257b80c046f18cdfd63d595658
SSDEEP

384:ersHKYflRi7fLePg1sV9pTwTpTmxOtKX7Lt:W8KYAfLwuIzM9KxOtKn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4ba1efa893e24d0898b755ac8860a70bd56c3b542b84e943e84affa9ec0e403

Files

b4ba1efa893e24d0898b755ac8860a70bd56c3b542b84e943e84affa9ec0e403
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ