Static task
static1
General
-
Target
ExcessV3.dll
-
Size
1.1MB
-
MD5
4f906a6216dd238f421afd24265dea73
-
SHA1
efa31167c02d5a3fd199f9c8c9dabc1ad1d63ac6
-
SHA256
1343f6928971bf567d19c916614263b2dbf09483c1a21fd5941db996964cb29a
-
SHA512
662bf6c2d5d8aa4f1700cf5531caf677dc75e56714a221b89d645273739611a7f4693bc4977fd62ac683d6bc464125404cfae77c647f9f614ff3d5cacc328b55
-
SSDEEP
12288:5K4TBQ1QP8YPcm9BRC2ukJEmYpoKDGDeT7Pc5XKnx8I6Oen:5K4e1QP5Pcm9BRC2uQiSKOMx8vbn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ExcessV3.dll
Files
-
ExcessV3.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ