1bdf75696fa73cb07e6c0312c964eb60f09d6de54965b20ccbe7543bed51378a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bdf75696fa73cb07e6c0312c964eb60f09d6de54965b20ccbe7543bed51378a
Size

14KB
MD5

5ce9978e499b1f40003d908b441ee846
SHA1

07075303c2f9cf579e44cfbb4dd6c1bcf52ecc93
SHA256

1bdf75696fa73cb07e6c0312c964eb60f09d6de54965b20ccbe7543bed51378a
SHA512

ec5a98434b3bfd8109d66018539f20fb5264c60447263a368bb23e9e2e3c7884342948167cb6a1ff58c915f5dee1628f6a9786a0366a4accc348bc3746b0f4f9
SSDEEP

192:XRTKdLktD4aI2mSiwOoEd+eSOs1Ts9vcJKshT0WfdE6texOQadkXB:hTUfaIwiFd+ePgA9vcJKqtftexOtKXB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bdf75696fa73cb07e6c0312c964eb60f09d6de54965b20ccbe7543bed51378a

Files

1bdf75696fa73cb07e6c0312c964eb60f09d6de54965b20ccbe7543bed51378a
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ