512dbd303eb16eef9edc3c9db7c158689791a82dc4c0fc106d6116c565d931b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

512dbd303eb16eef9edc3c9db7c158689791a82dc4c0fc106d6116c565d931b6
Size

48KB
MD5

69887dd6abf90f7e3ad6176f052611ab
SHA1

86496c8752759284395e9c410146a942a2053506
SHA256

512dbd303eb16eef9edc3c9db7c158689791a82dc4c0fc106d6116c565d931b6
SHA512

d492a3aec6aaa792b6e561eb717e2f9d4b554699b33f7e80ca67b8f5aa8d73ad66e9d541579d6c5139826398254c92d7d000d64027af989067e92d9eee6da281
SSDEEP

768:JfZlnnA66KvnSLDYhqMqpqklqEqMqk/kfetlGgdFlR71Of:tZlAdXYScfeP/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
512dbd303eb16eef9edc3c9db7c158689791a82dc4c0fc106d6116c565d931b6

Files

512dbd303eb16eef9edc3c9db7c158689791a82dc4c0fc106d6116c565d931b6
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ