2f14746d5fb7a85f955fec263d0833c02063d4fee092fc2eadc3243b00c442eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f14746d5fb7a85f955fec263d0833c02063d4fee092fc2eadc3243b00c442eb
Size

5KB
MD5

ce7cf433f443beb5cfc6b11ad4786c49
SHA1

3a477a39b31a221fe2b01eadf5e3b9b21e8c8e6b
SHA256

2f14746d5fb7a85f955fec263d0833c02063d4fee092fc2eadc3243b00c442eb
SHA512

961399649b91d0f52a276e96f5e75cf5ea23ff160efa6c52ad25dab599866797db73de7b12f99b233330cdbd87cc819fad29abdd9cc51ed6e3d7a92942e094f7
SSDEEP

96:nEu0SvcDTXKpHiLNxvmMoQDmDxDWrW5FGW:R0SQawxxoUW5FGW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f14746d5fb7a85f955fec263d0833c02063d4fee092fc2eadc3243b00c442eb

Files

2f14746d5fb7a85f955fec263d0833c02063d4fee092fc2eadc3243b00c442eb
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

/Users/runner/work/1/s/artifacts/obj/System.Runtime.Loader/net6.0-Release/System.Runtime.Loader.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ