Mono[.]Cecil[.]Mdb[.]dll

General

Target
Mono.Cecil.Mdb.dll
Size 42KB
Sample240503-3ffngage8z
SHA256 411f8ed8c49738fa38a56ed8f991d556227d13602e83186e66ae1c4f821c940b
MD5 1c6aca0f1b1fa1661fc1e43c79334f7c
SHA1 ec0f591a6d12e1ea7dc8714ec7e5ad7a04ef455d
SHA512 1c59e939d108f15881d29fe4ced4e5fa4a4476394b58b6eb464da77192cb8fe9221b7cd780af4596914d4cce7c3fc53f1bb567f944c58829de8efbe1fd87be76
SSDEEP 768:Ar5EYZep98C87KHeBUZwrEzsEAnbF+em50KktmM4CRIcZwMRTIzMAtpw:Ar59g98C87KHeBUb5AnZG+zdwMRTzAtS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Mono.Cecil.Mdb.dll

File Explorer

Mono.Cecil.Mdb.dll

.dll 42KB

Mono.Cecil.Mdb.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 411f8ed8c49738fa38a56ed8f991d556227d13602e83186e66ae1c4f821c940b
MD5 1c6aca0f1b1fa1661fc1e43c79334f7c
SHA1 ec0f591a6d12e1ea7dc8714ec7e5ad7a04ef455d
SHA512 1c59e939d108f15881d29fe4ced4e5fa4a4476394b58b6eb464da77192cb8fe9221b7cd780af4596914d4cce7c3fc53f1bb567f944c58829de8efbe1fd87be76
SSDEEP 768:Ar5EYZep98C87KHeBUZwrEzsEAnbF+em50KktmM4CRIcZwMRTIzMAtpw:Ar59g98C87KHeBUb5AnZG+zdwMRTzAtS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

@fireisreallol

Minor OS version

0

Major OS version

4

Entry point

49118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\src\cecil\symbols\mdb\obj\Release\net40\Mono.Cecil.Mdb.pdb

Mono.Cecil.Mdb.dll

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Mono.Cecil.Mdb.dll

mscoree

dotnet