e3df35dd45d8a9aad2e47d164a76c3bb702b7963a9f125f647a91179b73eb4e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e3df35dd45d8a9aad2e47d164a76c3bb702b7963a9f125f647a91179b73eb4e5
Size

5KB
MD5

5dfcdb3a774402351b215bfc0cf9da90
SHA1

1736d014dd18b1f559e5766268dc963d457ec8d6
SHA256

e3df35dd45d8a9aad2e47d164a76c3bb702b7963a9f125f647a91179b73eb4e5
SHA512

fdf8863237d74c1f9d5e4fd80c758713b25032d74c6e2244368780b6c8a59a178647ae631c503ed3a532011ab4bd9ca1b7a1319ea71bce739b50daec3ada1636
SSDEEP

96:bH4SPHBnfpHiL2xvO5DmDfDYuWoz3GWoB:bHTlhHxvWoz3GWo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e3df35dd45d8a9aad2e47d164a76c3bb702b7963a9f125f647a91179b73eb4e5

Files

e3df35dd45d8a9aad2e47d164a76c3bb702b7963a9f125f647a91179b73eb4e5
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

/Users/runner/work/1/s/artifacts/obj/System.Runtime.Loader/Release/net8.0/System.Runtime.Loader.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ