fce5c88ced6c71a27b9153c94132a01a4107b704abf2262159e5b902dbe1d06e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fce5c88ced6c71a27b9153c94132a01a4107b704abf2262159e5b902dbe1d06e
Size

8.3MB
MD5

09370aa19c049e7491b0b2d33dc65bfc
SHA1

2b46e94607c361904a9f158600448ee164035575
SHA256

fce5c88ced6c71a27b9153c94132a01a4107b704abf2262159e5b902dbe1d06e
SHA512

bc8eb2778d8f79aa43065403fdd2b5c2073a7fae7163a27bd664dc0b134642babcdcbb674b38eaebd624aca1ddd994c8883e7064d9caf89f59e3e5bb627b7c80
SSDEEP

98304:cjOHA/mIf7VN+ukfalE+aKEcGWH2p/uXvjWM:/HA/mM5cukSlE+aKEcGWH2o/6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fce5c88ced6c71a27b9153c94132a01a4107b704abf2262159e5b902dbe1d06e

Files

fce5c88ced6c71a27b9153c94132a01a4107b704abf2262159e5b902dbe1d06e
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

/builds/VaultOfKundarak/vok.sdk/src/VoK.Sdk/bin/Release/net8.0/obfuscated/VoK.Sdk.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8.3MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ