593c4ef34359a472363112d52498d403291435482fae3655cf2bd017170cc973 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

593c4ef34359a472363112d52498d403291435482fae3655cf2bd017170cc973
Size

16KB
MD5

dd87edf7b146b5cb5669f2f67fd9bfe3
SHA1

0d524f13fe89ed86ccd6a3811e7283d79ad26f55
SHA256

593c4ef34359a472363112d52498d403291435482fae3655cf2bd017170cc973
SHA512

db7fc6dfefde39aeaf9d9280a5313e51f629ca0cc31c3b2c1c06eefb96da5fd44599aa112983cbedd431a7806c6d3a210871b1e6521f73b9e074b3c8a19d7594
SSDEEP

96:7RPWYRHRp0RjWKnOl4UIzy7cFxvjUSDmD5DW:7RPWYRHRp0RjWlUxA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
593c4ef34359a472363112d52498d403291435482fae3655cf2bd017170cc973

Files

593c4ef34359a472363112d52498d403291435482fae3655cf2bd017170cc973
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.Globalization.Extensions/Release/net8.0-windows/System.Globalization.Extensions.pdb

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ