dcdbdc7c4b1a54965dbaff865f9f8618a7d7f1cd912e5c16b313bfe35959a0ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcdbdc7c4b1a54965dbaff865f9f8618a7d7f1cd912e5c16b313bfe35959a0ee
Size

40KB
MD5

2515b0e94c8919297ddda0a9ba60ab23
SHA1

9bc1b7287f5a544456c4d934a7c47948d5987422
SHA256

dcdbdc7c4b1a54965dbaff865f9f8618a7d7f1cd912e5c16b313bfe35959a0ee
SHA512

4da3b6dc7b3f5a07c04725c39e5f7688dba53f9e56c25411dc8c110e6593f08d56fc3c907f4d20b05349616de4e0df7af44f57d4638ae94fa12f296345113773
SSDEEP

384:sir5xVEmB9NHRORLzdX0qXq9rqEqnqxw3fUerlR71:sirL+ORORL5EqXq9rqEqnq+fUerlR71

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcdbdc7c4b1a54965dbaff865f9f8618a7d7f1cd912e5c16b313bfe35959a0ee

Files

dcdbdc7c4b1a54965dbaff865f9f8618a7d7f1cd912e5c16b313bfe35959a0ee
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files\root\ea795753\84c6d29e\App_Web_pemjv7ba.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ