128da4e808686f3d10ee035fc9ff6c888d86e0b3658c8a6bc0e3c4f0b3f23f90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

128da4e808686f3d10ee035fc9ff6c888d86e0b3658c8a6bc0e3c4f0b3f23f90
Size

6KB
MD5

5f761e597cefda25bb35719909f1209e
SHA1

a6768a050af81bc43490e349b5fb2dc91d2252f4
SHA256

128da4e808686f3d10ee035fc9ff6c888d86e0b3658c8a6bc0e3c4f0b3f23f90
SHA512

00d6758bc65ee5647f5790e67ad98713de03d7e1ca7b668046083df6f64f1ee7bd09073d2f5d7eb0368fbe7a3d94b498308c575f97ab8a6517ad88335648cd08
SSDEEP

96:ZfW325j3/wCz86TzJ2UH7HEYwatibMyPjz17lY:lWswE86TzJ2Ubkv/Z7zHY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
128da4e808686f3d10ee035fc9ff6c888d86e0b3658c8a6bc0e3c4f0b3f23f90

Files

128da4e808686f3d10ee035fc9ff6c888d86e0b3658c8a6bc0e3c4f0b3f23f90
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Daan\source\repos\NanoExploit\ClientTest\obj\Debug\ClientTest.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ