d9ee57d3554c0ff863942feb0f6f786acdc01a0f8a6d9e3d06ef3564a3a66335 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9ee57d3554c0ff863942feb0f6f786acdc01a0f8a6d9e3d06ef3564a3a66335
Size

89KB
MD5

d68455ddb5c0ab4c00f2a84052cf4b9a
SHA1

9dc1df4af79bb9c8797801b3911d51d28a7aaac4
SHA256

d9ee57d3554c0ff863942feb0f6f786acdc01a0f8a6d9e3d06ef3564a3a66335
SHA512

f3cf187e2a6197cc473b87d832a51ca46212fe0ba2b513cbb2aa98988540ec601dae574f0b4c6348592f1df3be05f42129db2640ada61d49d2119a7d5963a778
SSDEEP

1536:FsKGVmNmpIXhy3l+COmBJx2YCi9v4y2yzplGkzcEzQHOU3rDFw:FWkNmpB9jXx2YCi9v4y2y9lGkzhzQHOn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9ee57d3554c0ff863942feb0f6f786acdc01a0f8a6d9e3d06ef3564a3a66335

Files

d9ee57d3554c0ff863942feb0f6f786acdc01a0f8a6d9e3d06ef3564a3a66335
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.Services.Wcf.ClientService.Contracts.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ