7fd45713beff4dd646e1f9010106f8a8b008bf90bf3e8db151b7bc339402e2bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7fd45713beff4dd646e1f9010106f8a8b008bf90bf3e8db151b7bc339402e2bd
Size

7KB
MD5

759e83701f3385de656a5992619a7d24
SHA1

a55a98f9e306358d8edcf436fc110dfc966560e2
SHA256

7fd45713beff4dd646e1f9010106f8a8b008bf90bf3e8db151b7bc339402e2bd
SHA512

62d8fd472bce50cb7b5ff922f958c82208c0ad6290f713ea7fad583d815fa32e6e519acab4b2ea11d63aad4dc0741852e92278f2a021526e3708c7dcfd8097c2
SSDEEP

96:ZFMkXwfYfdMtdD/b3y50b3m7IUjSk743GGvhL4IuF3xf:LAfYFMtRDF27IUjK3lZcX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7fd45713beff4dd646e1f9010106f8a8b008bf90bf3e8db151b7bc339402e2bd

Files

7fd45713beff4dd646e1f9010106f8a8b008bf90bf3e8db151b7bc339402e2bd
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/Users/customer/GitLab/cube_games/Library/Bee/artifacts/500b0aP.dag/KinoBloom.Runtime.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ