90225aa6f8f877225cd1e2c2f7da7d62230884fa3f7ca0add080b6ef4fb9f95c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90225aa6f8f877225cd1e2c2f7da7d62230884fa3f7ca0add080b6ef4fb9f95c
Size

236KB
MD5

12921f52e729c1e3e7cff64b23326404
SHA1

bbcf3b7e85b1f6743db21fb696ba1f87c1cb9f15
SHA256

90225aa6f8f877225cd1e2c2f7da7d62230884fa3f7ca0add080b6ef4fb9f95c
SHA512

2641377f14bb7c08cce144dae8315b28c57a0150479e528d1946af05df8b19b63862a5023db5748b52bbf3e55e137523f76ddba8124b0bcc3ca7cb33540fd6e6
SSDEEP

3072:pF9/Mwrj7mSxhSC1m/SpXFTpWFEy+qo9Uyv+XSJMT+mzMfU4Fm1MyWmrhndPncvl:Hj7xLqjdPc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90225aa6f8f877225cd1e2c2f7da7d62230884fa3f7ca0add080b6ef4fb9f95c

Files

90225aa6f8f877225cd1e2c2f7da7d62230884fa3f7ca0add080b6ef4fb9f95c
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files\root\fa98da21\b764c50\App_Web_xwaygbp7.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ