de9d879833bcc414c24074196dc04c3f2a87feb93945d463be1fdd639cfa693a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de9d879833bcc414c24074196dc04c3f2a87feb93945d463be1fdd639cfa693a
Size

39KB
MD5

6b41f88ffb4e37c460d6bf76679272ae
SHA1

0335c0df9f2060dd5ff3090ea9c57d090ca2cbb5
SHA256

de9d879833bcc414c24074196dc04c3f2a87feb93945d463be1fdd639cfa693a
SHA512

ee8181f64a3d72af77cea5a8f8ed7b7de31ec35d3ee7af22af2cd528a648fac1b97162f1207183bf986308ace67bb4a515041787b4ad86918f829de315e84de5
SSDEEP

768:04YNXafVrBC9Iy19XeQAmQTdIddT6fz/Evv:0nd19OQwT2ddSzEn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de9d879833bcc414c24074196dc04c3f2a87feb93945d463be1fdd639cfa693a

Files

de9d879833bcc414c24074196dc04c3f2a87feb93945d463be1fdd639cfa693a
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\ptkat\Desktop\Chillet\Client\V4\Client.Core\obj\Debug\net472\Client.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ