f1257de784bfd45ac6a33f374e9e00cda4b857584dbe59e3f6514b8490c9496d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1257de784bfd45ac6a33f374e9e00cda4b857584dbe59e3f6514b8490c9496d
Size

48KB
MD5

f501d47ac548c9f85bb93e05cc2f7edc
SHA1

14148a8d8e709a700f42037fd74f0aee2ce6652c
SHA256

f1257de784bfd45ac6a33f374e9e00cda4b857584dbe59e3f6514b8490c9496d
SHA512

d9da995862bd0667001aae6fc663fe815c014845ef38f319d13c6ef9db37cc8fa93536bcfb37c7d6b345fb74fe456d54d2c0b3bf2ccb046c5b9aa16f83ab5c21
SSDEEP

768:6MBsrnuFGEMnjm0LylIqtqXqiqUrqsq/nfJlR71+lGgdAe:wKGEYO+YyAe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1257de784bfd45ac6a33f374e9e00cda4b857584dbe59e3f6514b8490c9496d

Files

f1257de784bfd45ac6a33f374e9e00cda4b857584dbe59e3f6514b8490c9496d
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ