0f8ff8798fb1ebfd8b5ce79c7b5fa582 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f8ff8798fb1ebfd8b5ce79c7b5fa582
Size

38KB
MD5

0f8ff8798fb1ebfd8b5ce79c7b5fa582
SHA1

ba83196adec8f6d6e8e18e2604a0968ca45f10ab
SHA256

a657f23ac20a73a0cd9ed846826f173a145fcf73501e1270e340ef5d264e38c8
SHA512

740a1b0f517f624bb02ff3640f0600008c7814582e39c90a38dfa8f7e5e050b15f2f835914e3f516aaa185940bbbbd604eb4c6e70fddf875a6390aa1c8595105
SSDEEP

384:hHJo0kxUw21YmprbLe5KabP+loKxHC12oDQbUPe1IMVqgrtv3+yFOq:43UF9neHSm12oDQy03XFD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f8ff8798fb1ebfd8b5ce79c7b5fa582

Files

0f8ff8798fb1ebfd8b5ce79c7b5fa582
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\_Projects\mvc\mvc4\EFCrudTest2\EFCrudTest2\obj\Debug\EFCrudTest2.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ