c695b111f0c0c169f8199936d778bf6f7b402914145507160d65b8124b2831e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c695b111f0c0c169f8199936d778bf6f7b402914145507160d65b8124b2831e2
Size

39KB
MD5

780649ea418857e89403d173e27c00d8
SHA1

fe2666aa83423c837f7ebec7066126bd76e51ed8
SHA256

c695b111f0c0c169f8199936d778bf6f7b402914145507160d65b8124b2831e2
SHA512

025f8cadab440f61d6de7c58beaf901ff0d5604c47081f99fb068a1ed4a1be7413112fe9f5333f68c3b24b39c8840685eeb8e499ff9c84c0b31ac07a0903b7d2
SSDEEP

384:SbTZ4YMTD2nX8Z4i59dBLmo2MsFhDP+efWgrO7/VYtG1He0Xxiwg2LptD9xspDQh:84YSNiDugrAeGk6xi4lXx/6fvgE7G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c695b111f0c0c169f8199936d778bf6f7b402914145507160d65b8124b2831e2

Files

c695b111f0c0c169f8199936d778bf6f7b402914145507160d65b8124b2831e2
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\ptkat\Desktop\Chillet\Client\V4\Client.Core\obj\Debug\net472\Client.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ