c41fa3613167d89aa15404b1ef106fb426988f3fa203decf6c11a2f771a05fc5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c41fa3613167d89aa15404b1ef106fb426988f3fa203decf6c11a2f771a05fc5
Size

22KB
MD5

da0bdeab092f517235aea90d7aa08a05
SHA1

932f1bbb459c631b11d2f6b33f6a4b675e0f12f9
SHA256

c41fa3613167d89aa15404b1ef106fb426988f3fa203decf6c11a2f771a05fc5
SHA512

0e9ec38ed11f1130cd2adf3477bc29c54b78f83a16884257bc0bce5ea513de3fdd17267f01b06dd2931ca117f530b1ed174887069d3d8fda9a20575b46303401
SSDEEP

384:wrYQ/QCxe2a1Ftu0NM5AVI2zc8wgja4JQ4jeBRU6Rz1HoBpzWruW:K/OLztu0NwwI2zc8fpJQ4MRJ/ka

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c41fa3613167d89aa15404b1ef106fb426988f3fa203decf6c11a2f771a05fc5

Files

c41fa3613167d89aa15404b1ef106fb426988f3fa203decf6c11a2f771a05fc5
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ