36643485bf493c8c0e5d27646a2eed4c212ad8d91f45e849501e184944f8e961 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36643485bf493c8c0e5d27646a2eed4c212ad8d91f45e849501e184944f8e961
Size

13KB
MD5

81a28f28c1c9d1b87b508914ce70ddee
SHA1

1db648a78420741c4c4df57076b0025a199310c1
SHA256

36643485bf493c8c0e5d27646a2eed4c212ad8d91f45e849501e184944f8e961
SHA512

502baf65a0f22b9383852d4dcb426553d4f7c3885e91e01dfcd94c59f8745683432a506fd387658d85dc1f211638a56f5ddee1e866cf3a325a8bcfcdd3cdb9f4
SSDEEP

192:pF4ReQmXjjknbHsfLeMLYOs1TT+qmVFLsTPLt4TwTmxOQadkX:fZubHsfLeML1g+zoTPLt4TwTmxOtKX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36643485bf493c8c0e5d27646a2eed4c212ad8d91f45e849501e184944f8e961

Files

36643485bf493c8c0e5d27646a2eed4c212ad8d91f45e849501e184944f8e961
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ