e4219685eab7a605596dc249dd194cf1bbaa069c6ec3ab030629406c06fc2f0c | Triage

Sharing

General

Target

e4219685eab7a605596dc249dd194cf1bbaa069c6ec3ab030629406c06fc2f0c
Size

50KB
MD5

440442aa59f95ec15b6d7c799654f831
SHA1

fa078fb80fee97d9cbdcb39cf27bd44265a2d06e
SHA256

e4219685eab7a605596dc249dd194cf1bbaa069c6ec3ab030629406c06fc2f0c
SHA512

543509cf58ef9d773aaf5922329c86bbb63a760f9c7e8cd0948085bbf91913e71cc28ef361c16e96a1385c086e68cae943dfa5cdc8a379979d97406ebed57e30
SSDEEP

768:wj/7WthjMNELiD/5hixPhFsCgjWdyLrVda/I3PDE/LcAkmxn70t:cGBer5QFYH3BEVkmx7G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e4219685eab7a605596dc249dd194cf1bbaa069c6ec3ab030629406c06fc2f0c

Files

e4219685eab7a605596dc249dd194cf1bbaa069c6ec3ab030629406c06fc2f0c
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Agent0\_work\82\s\Workplace.PrinterProvider\Workplace.PrinterProvider\obj\Release\netstandard1.1\Workplace.PrinterProvider.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ