Unconfirmed 111742[.]crdownload | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Unconfirmed 111742.crdownload
Size

535KB
MD5

cdca43d06bdef0ee31535c2a6df8556d
SHA1

cfa2a8cdeaeb7590384dfbf2f3d7ec863781fdac
SHA256

96c9be4e59d387a0138883c8d5d2e4cf589ab8531f0e63fd6a894692ce151638
SHA512

1c653b7fade7f803edd6d93600383e69355c4c971b9713f389a63d7e4509c791fb4318f9a9eed5283abff575e3867435268965115b936f8fc9fdde5431229d77
SSDEEP

12288:6ZZGShJrpoGvxnShF8C2Ws4w5HpjdJvlmuWjk/eR9RK7UmNAXwtukrCbqf1JgXrV:qFlvxWy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Unconfirmed 111742.crdownload

Files

Unconfirmed 111742.crdownload
.dll windows:4 windows x86 arch:x86

Password: 1

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 533KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ