44f35b20b3f0985626e0b69c1654a8020f523c6af01f9f3002c039116512c510 | Triage

Sharing

General

Target

44f35b20b3f0985626e0b69c1654a8020f523c6af01f9f3002c039116512c510
Size

36KB
MD5

52348fb5d063c4b8408be47be706e534
SHA1

8d42ded5eb13832dba6f8999e5f807bb97648c3c
SHA256

44f35b20b3f0985626e0b69c1654a8020f523c6af01f9f3002c039116512c510
SHA512

cbe08b5fa8ce0029f55da0dac9018600c953a88b06bd6c22daf462443ea4631bd29074a5a150793cae02a5dff50c829c5b7afb758f2ff308c6353374582dda13
SSDEEP

768:vfcxUctfkbUsZnkKI41we4rDZu2zu5seB/6fHrETXW:vUqcOb3na41wP5uj5sPLETG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44f35b20b3f0985626e0b69c1654a8020f523c6af01f9f3002c039116512c510

Files

44f35b20b3f0985626e0b69c1654a8020f523c6af01f9f3002c039116512c510
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Administrator\Desktop\Chillet\Client\V4\Client.Core\obj\Debug\net472\Client.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ