Runner[.]Worker[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Runner.Worker.dll
Size

329KB
MD5

77981a0f507d2aa9adfc6c0554d21b59
SHA1

57de540a78ac29538feff74543dceac4270ef8d8
SHA256

6f1cb078ae8294e995706af016db6b4be64d27d39f83d0b921d409e97a6bf715
SHA512

868113fdab027a3fa93a5427680a662458aa34ef803ad4fc968e4819df51f6354eaa2bb2d0eb7dfb55a221b9c1f677eee9f0b1e861e8d141c68adfb7833a5203
SSDEEP

3072:URbVIF/Te3hI8peX8VvGklBblE6mKo3oSi0p4qCA4Zt+Dw3TJKblgq3YLvv8OcoF:4/I8JVvGIE6WDELvvooykeybrN

Score

N/A

Malware Config

Signatures

Files

Runner.Worker.dll
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ