527d37ea7c1393ab01c99b249a2ed2489eb405112ac85427c13362446e4f60af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

527d37ea7c1393ab01c99b249a2ed2489eb405112ac85427c13362446e4f60af
Size

136KB
MD5

0ff0d44abfc26f51f7c0a81a23d33e77
SHA1

c1a8761cf19ecb251801cb505daeeff85df5fcbe
SHA256

527d37ea7c1393ab01c99b249a2ed2489eb405112ac85427c13362446e4f60af
SHA512

382448e4f2d30ac2ef98634560b59ddee0e1413bf9c08409ccf0926518d64c8f8b8a2db87e93cb058e24bea8be79d4a56b89ed7ad21eac1178aa0cbf8a75720e
SSDEEP

768:69EpXgW6JCKwa1f7bGwhTLT5bLPDnUBK1XS42UIp+TWuW+sJH6NWr:VgW6Jhp6whTlLL9Xh8+sJH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
527d37ea7c1393ab01c99b249a2ed2489eb405112ac85427c13362446e4f60af

Files

527d37ea7c1393ab01c99b249a2ed2489eb405112ac85427c13362446e4f60af
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\vcs_webui\b7d1dd8c\c9b456b\App_Web_buyerbasicmenu.ascx.453d3288.adh6qvwy.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ