cf6fbf8e4a261087eae556d97c55cffe6c23d98ad9d2c3bd9d13d4c174bd664c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf6fbf8e4a261087eae556d97c55cffe6c23d98ad9d2c3bd9d13d4c174bd664c
Size

10KB
MD5

c688e14f6ceb0322bbc9c71239322ef7
SHA1

9452924f6ffd7c9f0bebae7d052389b53a56fe24
SHA256

cf6fbf8e4a261087eae556d97c55cffe6c23d98ad9d2c3bd9d13d4c174bd664c
SHA512

5e9e8ce3c15ea69b3e8195bcf39affcfcecc9e126cd551cdf8e9af9b7c371c8fd4e2ff77bc0d64616b7cd2f553428ddd0b62c54d7255cf19252c24f15236c159
SSDEEP

192:xF2I8vD1tNjJcgZ4GpG7GPUTEz4YcxcJjc4fhR5pYM4:xN8b1XCbGpaZIz4ZqOmm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf6fbf8e4a261087eae556d97c55cffe6c23d98ad9d2c3bd9d13d4c174bd664c

Files

cf6fbf8e4a261087eae556d97c55cffe6c23d98ad9d2c3bd9d13d4c174bd664c
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\c4915c1b\2b318238\App_Web_xgzdfdwd.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ