00da803c0e14ebc95de957af75a0975ce9daf8504f29a0cbe56f08000a5a9f62N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00da803c0e14ebc95de957af75a0975ce9daf8504f29a0cbe56f08000a5a9f62N
Size

16KB
MD5

beb54762a87d60b0805b6636cb88b3d0
SHA1

1cd7125c44756af2233700c0cc59ea61d5ffa8ff
SHA256

00da803c0e14ebc95de957af75a0975ce9daf8504f29a0cbe56f08000a5a9f62
SHA512

8f9fe67b70d2367fd2d77432184617d0414af83e458dfbb1487c23b0746c68475718cce886f9478a6ec68161f9677f2029dad34aa10a3244cfba30b64528c8be
SSDEEP

384:3IpJ6Uv9OfLeMLwlfIb/rKTpTmxOtKXtTyLtqLt:3oKfLDslQb/G9KxOtKtyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00da803c0e14ebc95de957af75a0975ce9daf8504f29a0cbe56f08000a5a9f62N

Files

00da803c0e14ebc95de957af75a0975ce9daf8504f29a0cbe56f08000a5a9f62N
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ