b1af10c879af5650c95d0972a81134765fd7fe78ce5a982c7fb3cbba1c343742 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1af10c879af5650c95d0972a81134765fd7fe78ce5a982c7fb3cbba1c343742
Size

346KB
MD5

e4a5d8af56fa14daa71abdf42267b406
SHA1

8a29e001fbf55a52167906d2fc815a7ed55af93f
SHA256

b1af10c879af5650c95d0972a81134765fd7fe78ce5a982c7fb3cbba1c343742
SHA512

9fcd1fb1f8c3f346156be59afd55947c63f957ca318522ab19480bf236267ce37783b1a4ee2fabc88e79f1bf3572751a43f65e196019905a6d6582d08fcf4486
SSDEEP

6144:YFqjTFmymeIme9Gf+e7ytORZbV6JjvdoGzsbmVzpYrXmQTU/pW:Ibe7yATbCjVoitU9U/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1af10c879af5650c95d0972a81134765fd7fe78ce5a982c7fb3cbba1c343742

Files

b1af10c879af5650c95d0972a81134765fd7fe78ce5a982c7fb3cbba1c343742
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 344KB - Virtual size: 343KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ