0c753fa1c49c594d79b7b557b9c0bf9d0b660cc850227039bdfb6a382accb9ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c753fa1c49c594d79b7b557b9c0bf9d0b660cc850227039bdfb6a382accb9ea
Size

332KB
MD5

7e34f57fd17138bf50a815d384f95aea
SHA1

31da1cb09c548376555fd4fbdb7934c9293db0af
SHA256

0c753fa1c49c594d79b7b557b9c0bf9d0b660cc850227039bdfb6a382accb9ea
SHA512

c900f001e60118c95577bb7a555de9a623ce7be460d425449bdf2cb95d3e4ca0ce9ccf42123213c386aa5a53e5530424e2e6a66523734d4fb920c1c657059d49
SSDEEP

6144:4aFh67ztnKi0+xRs70X2M3MSG2saNKsLZ0YqCt1vN2LBaVkVpWL58205zWa3TRo1:gXVKixWoMSG2saNKsLaYqCtL2LBaVkVL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c753fa1c49c594d79b7b557b9c0bf9d0b660cc850227039bdfb6a382accb9ea

Files

0c753fa1c49c594d79b7b557b9c0bf9d0b660cc850227039bdfb6a382accb9ea
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.TeamFoundation.Discussion.Client.ni.pdb
f:\binaries\Intermediate\ModulesBuild\tfs_core\Microsoft.TeamFoundation.Discussion.Client\1.0.0\Microsoft.TeamFoundation.Discussion.Client.pdb

Sections

.data
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ