992fb3bfee6495f7db5d57241f64f69e08ab2085b5ae3a49addcc8a00665fa9d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

992fb3bfee6495f7db5d57241f64f69e08ab2085b5ae3a49addcc8a00665fa9d
Size

189KB
MD5

b290f977adb7a0f609db93ea6501c4c5
SHA1

467ee9cf6fcd8cc06dbd8eab10e6fdfb1ae75f46
SHA256

992fb3bfee6495f7db5d57241f64f69e08ab2085b5ae3a49addcc8a00665fa9d
SHA512

ae4028200c3d4ede75d9925c1c1e876e4f2e6b3a7d47672331086a61d9a61cbe509b3857fdfec1642d53de32d6545b56fbc764389fdb799daecd02945c99a5c5
SSDEEP

3072:HbUHW1hrVVaObSEcIkBaI5aYXKZupoL1WUU43wjOhfwMSt/8K+LU65iCyDhIGa75:7lcILupuN+YL3iCyDqx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
992fb3bfee6495f7db5d57241f64f69e08ab2085b5ae3a49addcc8a00665fa9d

Files

992fb3bfee6495f7db5d57241f64f69e08ab2085b5ae3a49addcc8a00665fa9d
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ