9x9eyt[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9x9eyt.7z
Size

18.1MB
MD5

7bf54bd301b78c3a208fdaddd89e2ce1
SHA1

201024b0205f705fc8450c6ffdf01c87e6df0de3
SHA256

156cfa6893bbe525c9f1c19c79c8f10ffbb4ef6a085d4a61f88c18ed2161c6a2
SHA512

89318f1b4f1459635923420639a28cdb1ee4ed4a1bc62194fb4f442acdd574bbe661c57899a7043ac5e3e19157846246d2eb9b3ce93874abdf0999980f04b5c0
SSDEEP

393216:erZBxTdGHEeC47E1Vo1ljwMjJAAYLYl6IYtLxYa41uIEdf9lSW:erZBxTdGHCaE1Vo1ljwoNYLYlnYc4dfp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Managed/Assembly-CSharp.dll

Files

9x9eyt.7z
.7z
Managed/Assembly-CSharp.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources.assets
sharedassets0.assets
sharedassets1.assets