5331c4b3097a2d094c7b6d5cc0aeea80e66e3f4c649a7c1c851e85b448ff1164N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5331c4b3097a2d094c7b6d5cc0aeea80e66e3f4c649a7c1c851e85b448ff1164N
Size

131KB
MD5

bb69db4a50a9022e585e0b7b3030dff0
SHA1

e01fc5faad9bc633bdc345965d6120623c53bbb2
SHA256

5331c4b3097a2d094c7b6d5cc0aeea80e66e3f4c649a7c1c851e85b448ff1164
SHA512

b1b52f7933ee6817a4c26537cdf838b456bd5dd8feef80acad50931c515def82e3a12e81f08f706a8755d8018a6c439286bd0c02f4ea7a9b9c431062db1d90fa
SSDEEP

1536:KUzRtLLGlPw30hUMtd4hV8fXHpXgHRZe0o+WHnbeO:KSRLQPwkqMf4hCfXJXgHRZ/o+WHnbeO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5331c4b3097a2d094c7b6d5cc0aeea80e66e3f4c649a7c1c851e85b448ff1164N

Files

5331c4b3097a2d094c7b6d5cc0aeea80e66e3f4c649a7c1c851e85b448ff1164N
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\ecb2a444\43265ecd\App_Web_ivc4yz2a.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ