f93754e549281ec50d5931591fe8dd8911b1f41af8e9a654e98da3c0b5ca3629N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f93754e549281ec50d5931591fe8dd8911b1f41af8e9a654e98da3c0b5ca3629N
Size

8KB
MD5

788e61d26cbbb9a6b5906e895bc40930
SHA1

4474df431d59636b93d0fede65a89b8ec0212b8e
SHA256

f93754e549281ec50d5931591fe8dd8911b1f41af8e9a654e98da3c0b5ca3629
SHA512

ea05dd24c18d4eeceb3b793815799d394e91f89fba9b698a8c2890c06b47ad2ba817db43e50decee2d050c0783131efedbb6659c82e121d216d3cb78f30a4a69
SSDEEP

96:JuJUJSWan6+14GppHkJqS8G1AKAzKs4wPp55PipMjUAjSR:YG4nR4AKJx8G1TAzUwhPUM/+R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f93754e549281ec50d5931591fe8dd8911b1f41af8e9a654e98da3c0b5ca3629N

Files

f93754e549281ec50d5931591fe8dd8911b1f41af8e9a654e98da3c0b5ca3629N
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\4f630ac0\547d1a42\App_Web_hmcem0xa.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ