97b05064bf386a2f193f186c7c2fd22c6ac09707b1339539e692384f2227fed2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97b05064bf386a2f193f186c7c2fd22c6ac09707b1339539e692384f2227fed2
Size

13KB
MD5

78d2d7a1e0ea7b97ea2f7325272a5e46
SHA1

967b62700622dc43458308ccb970b2f38643eb4a
SHA256

97b05064bf386a2f193f186c7c2fd22c6ac09707b1339539e692384f2227fed2
SHA512

9a532d306ec85cd17a54afbac696332fc5c91e6755ba1ff7033e5c969416d31bbc718eaf52467ff146976b9ea0c9b3f26f2a6f9ddbd30dc9c7adeb029d26d1c5
SSDEEP

384:mAszeEd4K9f/iYcZK+K29JyRchPRFNMV2OF2:mAszXdj/ifg+1h5Ugm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97b05064bf386a2f193f186c7c2fd22c6ac09707b1339539e692384f2227fed2

Files

97b05064bf386a2f193f186c7c2fd22c6ac09707b1339539e692384f2227fed2
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ