5fa5e020a3c25a49bd02dd0aa5273de0c7aaecd9be42ad99963bb7aee45aea10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fa5e020a3c25a49bd02dd0aa5273de0c7aaecd9be42ad99963bb7aee45aea10
Size

180KB
MD5

0f6cf5005ba76c8a186d61695846aa89
SHA1

cd372e4386a44dc448d3560daceb5f5f6e9fbda7
SHA256

5fa5e020a3c25a49bd02dd0aa5273de0c7aaecd9be42ad99963bb7aee45aea10
SHA512

f74842ff4f426a201877d40f8a281f5854ad54b86337be1e6693076bb5c47f6d5034300b6d45225b55d72e6698a7042ffc9085bbeac0da55bfe975b9afb23db2
SSDEEP

3072:WW2AQxvtw/sAfUXSJMT+dsyZQUeiXUyWmrje/vqqoq+yq:WDxvu/Ex/vg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fa5e020a3c25a49bd02dd0aa5273de0c7aaecd9be42ad99963bb7aee45aea10

Files

5fa5e020a3c25a49bd02dd0aa5273de0c7aaecd9be42ad99963bb7aee45aea10
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\97109801\6daf76a3\App_Web_ypxudqkd.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ