978df00956201be415ae3659d011fcd75b37d3a0c484315d7c96ee627f31a488 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

978df00956201be415ae3659d011fcd75b37d3a0c484315d7c96ee627f31a488
Size

10KB
MD5

18a7a0f415b3d5d66db7817d85407bbb
SHA1

9087f124cf24b485424a65528b7722f3b1265b6e
SHA256

978df00956201be415ae3659d011fcd75b37d3a0c484315d7c96ee627f31a488
SHA512

779a91096599782f775128b9cd54f554486566ef96e2a49d2d7de9688d04b6ac4d8334d56c0a55c579f8ce3cc0dcd42017ca0157573ac5dfea673925ca0d6606
SSDEEP

192:1prXf0gb1Pv2Qdwa/tGODb1Lu7IW196jgN3rEE47e6Y:H0e1PUa/oCLuGjgNbEER6Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
978df00956201be415ae3659d011fcd75b37d3a0c484315d7c96ee627f31a488

Files

978df00956201be415ae3659d011fcd75b37d3a0c484315d7c96ee627f31a488
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\RedPhoenix\repos\redphoenix-projects\utils\AppLogger\obj\Release\AppLogger.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ