90c7daea21a42517a4283d8cdcf9f73146b00bc5a2b6da212568aa0287ee5240 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90c7daea21a42517a4283d8cdcf9f73146b00bc5a2b6da212568aa0287ee5240
Size

378KB
MD5

85de053b95d84dc848129459352883a1
SHA1

78a85fc17e8f781f5bda60d1e2f7bedbe9ff29d1
SHA256

90c7daea21a42517a4283d8cdcf9f73146b00bc5a2b6da212568aa0287ee5240
SHA512

b4f72e301d3a0491288e57a40bb6f2163d137a10a5edc853accbc57143d94f6080083574641bcae52b82dc10a57b8ece62eb9ca9b48bc83907ec02f9661f5dbd
SSDEEP

3072:DiFGYZLoZMRtTX3srovJ4ycWy9Z+Z4a4bpD8VWS/AYfKgcszdubk/Hs+t9eNUsYW:DiBo+Rt7crzHg9EfiSDK2BX3at2j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90c7daea21a42517a4283d8cdcf9f73146b00bc5a2b6da212568aa0287ee5240

Files

90c7daea21a42517a4283d8cdcf9f73146b00bc5a2b6da212568aa0287ee5240
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

XmlAuthority.SchemaElements.Contracts.pdb

Imports

mscoree

_CorDllMain

Sections

a $,(
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ