856863f93d0c2ce20c6813c5f7b8e785cfe0722e80a3000a858e3157e93355da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

856863f93d0c2ce20c6813c5f7b8e785cfe0722e80a3000a858e3157e93355da
Size

5KB
MD5

65ca2d6fcafbe99855601d600ec85a35
SHA1

faa2b6e887bc16f60ee9b6b0afaf80a5803de62c
SHA256

856863f93d0c2ce20c6813c5f7b8e785cfe0722e80a3000a858e3157e93355da
SHA512

db2d9998d88dc494091ce44e5e677e04c8d23f159809b4034e73dbb93d60e9afa4debd63be51a7241bb4db47d5f689d270c70118142165fe51f6b0e95ef31580
SSDEEP

96:WoQfQDp7/EwU/GnGWcenRLhaXIm7+Tv+E5dN3:Gf6FswU/GnGWcenpYFUr5d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
856863f93d0c2ce20c6813c5f7b8e785cfe0722e80a3000a858e3157e93355da

Files

856863f93d0c2ce20c6813c5f7b8e785cfe0722e80a3000a858e3157e93355da
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Checkmarx\Enterprise\CxSolutions\Enterprise\builds\16\Source\Engine\EngineContract\obj\Debug\CxEngine.EngineContract.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ