f156293f40abb57c17d595283c6aceb33aee4153e15bcbeee8c2d79286b834c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f156293f40abb57c17d595283c6aceb33aee4153e15bcbeee8c2d79286b834c9
Size

51KB
MD5

53393ba2d5722dd6328b31d3ec9cf98a
SHA1

b09b82c918f41a8d8f07941d992dcc9b270cbfc7
SHA256

f156293f40abb57c17d595283c6aceb33aee4153e15bcbeee8c2d79286b834c9
SHA512

0bcf7f08bd8b4824da90d358a4b77ae522eaaf355b35dc9593ab38fb2a2f4ce16a09b73cd828b7e0613e5b3a3b9102ac3813da1bbbb260ba0fd3d25f911d9664
SSDEEP

1536:hmFiVlubWpD4CHdpLwhOthF/GAnn2d/RgV3xGGFy6pU/m:h3VlubWpD4CHdpLmk/Dne/RgVBjU/m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f156293f40abb57c17d595283c6aceb33aee4153e15bcbeee8c2d79286b834c9

Files

f156293f40abb57c17d595283c6aceb33aee4153e15bcbeee8c2d79286b834c9
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ