7e6add2e60bb4974445ab21b37e2b6a1815fe41026d2475e9acd68ada13a2439 | Triage

Sharing

General

Target

7e6add2e60bb4974445ab21b37e2b6a1815fe41026d2475e9acd68ada13a2439
Size

160KB
MD5

30eb17d94e7b3d461c5bb6de399cd283
SHA1

60f1c91c3ab9da91cbfb1edafcb44b9110fbeedf
SHA256

7e6add2e60bb4974445ab21b37e2b6a1815fe41026d2475e9acd68ada13a2439
SHA512

800d47a5a90046cb2c25ad843043beac26f2b37e087e8ee6207558a9d2b6a8f5f4790763e7a419511d855cd80276c802426fa6a21b67fc65722bfbdfb53c6d4f
SSDEEP

1536:e4mx+MKnBtQp3UluD21lYD3vq5jxFdsY+SgTY5xwpfFJK2lIKKc4dSV8Ab8LN45i:aIxupDFJrvA45i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e6add2e60bb4974445ab21b37e2b6a1815fe41026d2475e9acd68ada13a2439

Files

7e6add2e60bb4974445ab21b37e2b6a1815fe41026d2475e9acd68ada13a2439
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

PresentationFramework.Royale.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ