38a5ae9181eda8579e9b1a1cf4210e017dd64338efe0bfafcf70f8cd1b431526 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38a5ae9181eda8579e9b1a1cf4210e017dd64338efe0bfafcf70f8cd1b431526
Size

950KB
MD5

d31afae2c96ddd2251402faae3902d17
SHA1

d92a06406107754e1ce9c92d541c2054aed65523
SHA256

38a5ae9181eda8579e9b1a1cf4210e017dd64338efe0bfafcf70f8cd1b431526
SHA512

00b0938ca9f70243df90471a2de4888824eb06b11ffaf1eeda2974be21a34aa8145c0ac1eec32c080085f51dfaf9f47e196b5714dabdf14d824908341a9a3f28
SSDEEP

12288:dk+R3HxxkpbvpFEwoUSjlDUxRvdVDnc8iNGNTWKGRSB3K0Z:l3xxKVFEzUh48iMNTWxRYz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38a5ae9181eda8579e9b1a1cf4210e017dd64338efe0bfafcf70f8cd1b431526

Files

38a5ae9181eda8579e9b1a1cf4210e017dd64338efe0bfafcf70f8cd1b431526
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GIT\AlecaFrame\AlecaFrameClientLib\obj\Release\AlecaFrameClientLib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 948KB - Virtual size: 948KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ