38e196ac50f5cd8e4f6989e140e5c5acf5bae89f11d39e6d161e657f53d7234cN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38e196ac50f5cd8e4f6989e140e5c5acf5bae89f11d39e6d161e657f53d7234cN
Size

48KB
MD5

8b133166e1e5d6da07e140ba034fc200
SHA1

6faff7fc52cf4133ab229594f8d9db89fc3bb640
SHA256

38e196ac50f5cd8e4f6989e140e5c5acf5bae89f11d39e6d161e657f53d7234c
SHA512

c1b48ae16271ef5f27eb8377d96c22e19547a48bac276085ce84f12121fbae592a615c11b12f41921d818ab2b77e3bfb2cbf32e7753c6e86a01be665c3c08b33
SSDEEP

768:zgWUXylb47FoLfLq+qtfrqsqIqGqeetlGgdYlR71pf:zgWqyt9jezePi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38e196ac50f5cd8e4f6989e140e5c5acf5bae89f11d39e6d161e657f53d7234cN

Files

38e196ac50f5cd8e4f6989e140e5c5acf5bae89f11d39e6d161e657f53d7234cN
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ