cometmbpkg-BodycamForBonelab-3[.]0[.]1[.]zip | Triage

Sharing

General

Target

cometmbpkg-BodycamForBonelab-3.0.1.zip
Size

21KB
MD5

d59c5b22aea324618326b0a3bcc270ec
SHA1

f7844438e5b58d13fc84e35f27cdf52791761f71
SHA256

6687312974670695fcd043d2d5e93e7f8f8095c2847fc77d45a771c91fec2e9a
SHA512

561d21047a5818e8c37d95886c061bd7055a2c3e6dd97b7733d2437c8d1ca9c7ec33c2e081ac5f2ce94e43fcb6930a3af986a3a1fbd6b4670a546e29b8e3cce3
SSDEEP

384:xnkt9P7LRlIq6LQiW8z2+uQzCW5haz8fMXNwp+eYnYOxigWUh2zztYIniWjOfQ/9:xnMjLR09vBuQWW5S8fM+Q3Ysh2FYuWo1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BodycamModBONELAB.dll

Files

cometmbpkg-BodycamForBonelab-3.0.1.zip
.zip
BodycamModBONELAB.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\conno\source\repos\BodycamModBONELAB\BodycamModBONELAB\obj\Debug\BodycamModBONELAB.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
README.md
icon.png
.png
manifest.json