36958ef5bcf3548037d9da04f3c9b6b659ac3ba0ad7b04a548226bc123ebee27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36958ef5bcf3548037d9da04f3c9b6b659ac3ba0ad7b04a548226bc123ebee27
Size

15KB
MD5

5f75fa34f18564611dd8522d36eb5153
SHA1

eb7af45c57197416653c2d3f1d9a796b72a8cbbb
SHA256

36958ef5bcf3548037d9da04f3c9b6b659ac3ba0ad7b04a548226bc123ebee27
SHA512

2aa28e179d5039d9b51d64229785e482d6081d4bd69df0d7e571ee5d85a8212c98458ae86ff368f252887ad7e04ef015b695e9e25b92e6e39c132d528017c564
SSDEEP

384:RHEtLH3XzQtDg+lIE8m5y1zV2VDy1atK7G1mSg4moo:ReEtDg+itm5yZSLSoIroo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36958ef5bcf3548037d9da04f3c9b6b659ac3ba0ad7b04a548226bc123ebee27

Files

36958ef5bcf3548037d9da04f3c9b6b659ac3ba0ad7b04a548226bc123ebee27
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Data\Epicenter-Remote-Administration-Tool-master\RemoteDesktop\RemoteServer\RemoteServer - Copy\obj\Debug\RemoteServer.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ