980d784f44ad9d5fa2447a6201119369 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

980d784f44ad9d5fa2447a6201119369
Size

16KB
MD5

980d784f44ad9d5fa2447a6201119369
SHA1

b36fa6cae39fd518a1b02f4b2435bbe611780b8f
SHA256

1fe878d7b30a638fa87d9c23df64d562ef5b2421541adcf58b4096d9a79ba080
SHA512

925a473e7c7086b62b02d88f21a62654e9b0823ebe3d2b31ab2abf76d617a44d9c8baec229d8f86223df2b59ce1c0a3d91d2dca315fd39f251b8be6b66a7bd23
SSDEEP

384:DMreZjGx9rSrozVAv4bMG6mmmL0O+hv/WQw1h5S/Mc8:D7Zjo9V8naLmB8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
980d784f44ad9d5fa2447a6201119369

Files

980d784f44ad9d5fa2447a6201119369
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ