wyvernunbanner[.]dll | Triage

Sharing

General

Target

wyvernunbanner.dll
Size

292KB
MD5

944729dfb3117fd4ead1f47846e02182
SHA1

53c890f62851b9c14b4b2f2167a6c142f174580a
SHA256

189dbe39de284a00399a039e54f781180a3bce47f1be75a1ba6e9c61724c3e46
SHA512

5807ab8bb56659fabf1b85bc7513bec129524e1f67f465390f8219dd62026e3dfa61d36b0a08d301c8bcc50be3889663c4dab09ddd4616765abf522bbf403bed
SSDEEP

6144:R9xMNNCYlnkv3uhLTfHxkBkqopYomvCyQOdN44Ngl5e4hHeYv:R7M/7+3+T/yBk9yQOb44Ngl84hx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
wyvernunbanner.dll

Files

wyvernunbanner.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ