ddf6df5e2bb8981d0f0328365595224584694bee29b3b1f6fed34b18cdab3162 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddf6df5e2bb8981d0f0328365595224584694bee29b3b1f6fed34b18cdab3162
Size

143KB
MD5

672cd4a36efcb68acd4ba6d36afe4c89
SHA1

6d9d11781bedac1300a26ddbf65a2b047fd64389
SHA256

ddf6df5e2bb8981d0f0328365595224584694bee29b3b1f6fed34b18cdab3162
SHA512

1b862565cf294e4fba9321430ffaf220306661fa8e3a7a5a6fa5ed947999f7400fd4e301174825f7ed77ae4dba64e2e3cd7509a1b9e85c8a39f128ce3939f885
SSDEEP

3072:uq2Ed3D3wXcJoVpZ1UFl8tgXwSZ232cpSZ2K2cQxxz0NSo0vCASK2SSH3a:uq2w37wRpZ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddf6df5e2bb8981d0f0328365595224584694bee29b3b1f6fed34b18cdab3162

Files

ddf6df5e2bb8981d0f0328365595224584694bee29b3b1f6fed34b18cdab3162
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ