a98f80f0f46a24e7c410f0a261c1eaa6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a98f80f0f46a24e7c410f0a261c1eaa6
Size

44KB
MD5

a98f80f0f46a24e7c410f0a261c1eaa6
SHA1

f760e2f83f7217a30240f564bc3862279a6a9939
SHA256

574895940cd7dbe2d671af562ae4299a2ec2d7ba5e807d47e6c76f77b50df125
SHA512

0b5068a5e9da6085ca6b0707dcfc874d41eeed0d61ebe42870b221b936c3fbc126554ed379f35fe769183055f58c6391722f55b95c83a6fa190cc1be94522674
SSDEEP

768:voAkkDZCBiW96ob6JYibj5hM0Iwd7Xw6xJ:voxBik166ibj5hMBwdLwQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a98f80f0f46a24e7c410f0a261c1eaa6

Files

a98f80f0f46a24e7c410f0a261c1eaa6
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\JoseRaul02\AppData\Local\Bossland GmbH\Honorbuddy\2.0.0.5872\CompiledHonorbuddyAssemblies\AutoEquip2_634764280489531250.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ