f4fedcff45608ce1f2fbcf9d622f780a4350b35db3988125587a3fc0ff05529b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4fedcff45608ce1f2fbcf9d622f780a4350b35db3988125587a3fc0ff05529b
Size

20KB
MD5

64af56eb0a0e9b6d94303cea18c1045d
SHA1

4518c6a0bf9a1c904758f63b7982e2c3ab580be7
SHA256

f4fedcff45608ce1f2fbcf9d622f780a4350b35db3988125587a3fc0ff05529b
SHA512

896f027701cc73dee029520db56a52e62c238538ee062834f3554e8af86b01e835dac1f85e142d9ee06b780fd5b0f4f74454251b62419d331de774f0e6d0d599
SSDEEP

96:9WbVaWnblzpfhBterf8pKZyS3kCxvjUsTDmD5D:9WbVaWnbhpbcrkpKZyS3kCxAs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4fedcff45608ce1f2fbcf9d622f780a4350b35db3988125587a3fc0ff05529b

Files

f4fedcff45608ce1f2fbcf9d622f780a4350b35db3988125587a3fc0ff05529b
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.Net/Release/net8.0-windows/System.Net.pdb

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ