ba9b35d889533e9d8078aae057c95720N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba9b35d889533e9d8078aae057c95720N
Size

16KB
MD5

ba9b35d889533e9d8078aae057c95720
SHA1

474dd5833fd28f8ff81b7d2f601a76af1520e972
SHA256

f5230a2e565a04b306a636ad71c90cdabbd6d7cf63bd919699c70038d9d94e7f
SHA512

7439b00a400ef23d749d4b8b01e99b48f715e28b598a3f1a662a3ee0f7979fa4f4908ddfcdb5a8d0f77363cfae680c521207de903ab409c273159539b9a9572d
SSDEEP

384:H3DLfjWWaQG4+5ovZlkxg0M9a+vvcIChm571sNNKjhv:H3DvWWatbScjwvOfNNKF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba9b35d889533e9d8078aae057c95720N

Files

ba9b35d889533e9d8078aae057c95720N
.dll windows:4 windows x64 arch:x64

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ