c64a8f20379a3114b9360dc9a00a0de397c5dede34b5c54e6f8d7fe08b31fb25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c64a8f20379a3114b9360dc9a00a0de397c5dede34b5c54e6f8d7fe08b31fb25
Size

17KB
MD5

e48210ef1de87baad585e536a61e2a8f
SHA1

8035d64ac32297733a9d560be5932090631d1c10
SHA256

c64a8f20379a3114b9360dc9a00a0de397c5dede34b5c54e6f8d7fe08b31fb25
SHA512

5583146ab65755b727b5938ed71cab099a037a1d5169a30307e94d317a5069fb05789d43059337256feed13795fdaefe211c5e1fd56bf9cfbe0578408f9c6a98
SSDEEP

384:hslwRdScEY/CpZEIauJAscP0tEIhxu55D84C:h9SzT+bQcP9IruP0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c64a8f20379a3114b9360dc9a00a0de397c5dede34b5c54e6f8d7fe08b31fb25

Files

c64a8f20379a3114b9360dc9a00a0de397c5dede34b5c54e6f8d7fe08b31fb25
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Work\agent\_work\10\s\dev-tools\XAML\Main\CleanedSource\WPF4_NC\Release\MultiColumnComboColumn\obj\Release\net6.0-windows7.0\Infragistics.WPF.Controls.Grids.MultiColumnComboColumn.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ