99c16a01bc18fd01b96cbc49867cd8a4d4e4079381e0d83ef9b545921b031f93 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99c16a01bc18fd01b96cbc49867cd8a4d4e4079381e0d83ef9b545921b031f93
Size

6KB
MD5

60cbac64a4f03f8c0916108c945db028
SHA1

f64c9b58ce50dbfc76a5ca1a21526206210ccf80
SHA256

99c16a01bc18fd01b96cbc49867cd8a4d4e4079381e0d83ef9b545921b031f93
SHA512

34ebe0f366d58c8ee151f057418336c0cc2306cb77ce4a4f7e0ead22f2e457b7a7f44070e8c8062182866707630eda27b7caa4ad0afdda2bf7b55834be8374c4
SSDEEP

96:/H+lj9YDhx/cHyTqc8AUbCC+Arz88r4ROBOJobPw9YEBgK:/HQYb/ZuF2A88rwAkJP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99c16a01bc18fd01b96cbc49867cd8a4d4e4079381e0d83ef9b545921b031f93

Files

99c16a01bc18fd01b96cbc49867cd8a4d4e4079381e0d83ef9b545921b031f93
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Temp\dp3qeaxp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ