0f20994ea6ecbfd739cab1d395b5c44f2f538d305252fab5b40ba970909c70c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f20994ea6ecbfd739cab1d395b5c44f2f538d305252fab5b40ba970909c70c1
Size

36KB
MD5

7c685399b5521be9db17790f0b5de88b
SHA1

6b752da8370de3bf2ec75a275c917a725717a344
SHA256

0f20994ea6ecbfd739cab1d395b5c44f2f538d305252fab5b40ba970909c70c1
SHA512

abba954b0f5477b35cf6daa4d3af8c0009d9e94ce3e902bc58d20c32c44ec62a3c6998c5314ef5dc46b5509f788582b3548aba686eb3c09a053a7b05dbccba51
SSDEEP

384:u1itsLzObUWyH857ie+VZ1jkZ9wtZRd0Gb724sEtMtJHqCyyLU89Mu36LLoxe0XZ:X+LzcUpHDeITAXGP24sEtMtvjMbKX+e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f20994ea6ecbfd739cab1d395b5c44f2f538d305252fab5b40ba970909c70c1

Files

0f20994ea6ecbfd739cab1d395b5c44f2f538d305252fab5b40ba970909c70c1
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ