e6cf5058f567420e7cc050b7a3e778157df83474adf7e634091be7a2f3c0992eN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6cf5058f567420e7cc050b7a3e778157df83474adf7e634091be7a2f3c0992eN
Size

127KB
MD5

3733ade985ddeac37b60a6517170ca20
SHA1

dfaaf62a5ead4f797612d89b3c0b02cf92289b63
SHA256

e6cf5058f567420e7cc050b7a3e778157df83474adf7e634091be7a2f3c0992e
SHA512

5aaa948c337eb7622e8627d90ff357310600e3f23999f87d30abf1555cb4f17c8d282da488322ed116082d3ab7780154bb11bedca035cdd54effe936b587a4c0
SSDEEP

3072:qH0Ndh7bVolTPSiLXk1RGo7eP2Z6Q1z4P0dwhno55m2z+Zv5y5hAU2JchuqvXmyZ:qH0NTMRv+6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6cf5058f567420e7cc050b7a3e778157df83474adf7e634091be7a2f3c0992eN

Files

e6cf5058f567420e7cc050b7a3e778157df83474adf7e634091be7a2f3c0992eN
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ