f2c39289dc5b91397e0422cb7aa70c4a682ed363714d184af599292b0e66bcd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2c39289dc5b91397e0422cb7aa70c4a682ed363714d184af599292b0e66bcd7
Size

663KB
MD5

c934b441d4a5422ad0716dddd70cc3db
SHA1

7820f7971f49fa015619b02f84615e07abad8e55
SHA256

f2c39289dc5b91397e0422cb7aa70c4a682ed363714d184af599292b0e66bcd7
SHA512

60d7e290f3ff1655c48513d4d008038665416aa10000bbb3a24e77f11c89e172abfe498cd46682b1f6877d9826aba8676740a45fa994716a9cf55a892dc2d944
SSDEEP

12288:Yq3ZhK9cLq4RneO9hiq56ubwUixPJ1YZBfC95:77QAq6V5zwU2PbYP

Score

10^/10

Malware Config

Signatures

Detects executables packed with Dotfuscator 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_Dotfuscator

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2c39289dc5b91397e0422cb7aa70c4a682ed363714d184af599292b0e66bcd7

Files

f2c39289dc5b91397e0422cb7aa70c4a682ed363714d184af599292b0e66bcd7
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 661KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ