922794b6b768960add821c40dd4ce41af252451c481691f717c0d3d305f2c06a | Triage

Sharing

General

Target

922794b6b768960add821c40dd4ce41af252451c481691f717c0d3d305f2c06a
Size

91KB
MD5

92b1387ca2084ef28bc0f0f5f7b8fc24
SHA1

de489ecb58ed23e26c1fce29349b75bb8eefce50
SHA256

922794b6b768960add821c40dd4ce41af252451c481691f717c0d3d305f2c06a
SHA512

8463f6ca5872ca02a4a8528d94f3cf940d4610b6afb102c615e52664525aa1cb971612fe39f1eaaf096c9aa4faa1c7a1f8333e9191beed882f3f667a101c3660
SSDEEP

1536:KSoiggnvwU73Dz1vQZzgD4OzcSDYzzobmiNEgEgVf:XoiggX73Dz1vrsOzezVKE/yf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
922794b6b768960add821c40dd4ce41af252451c481691f717c0d3d305f2c06a

Files

922794b6b768960add821c40dd4ce41af252451c481691f717c0d3d305f2c06a
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.Common.Configuration.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ