3713e40bdeee3f423e1221f73bfa4288af4ec97a21df2d95a00b956f22c130fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3713e40bdeee3f423e1221f73bfa4288af4ec97a21df2d95a00b956f22c130fa
Size

188KB
MD5

4b70d62f2fbf8584d26be7cfce92e7c4
SHA1

4806db9931596a974bd601dad3ee4891055365ec
SHA256

3713e40bdeee3f423e1221f73bfa4288af4ec97a21df2d95a00b956f22c130fa
SHA512

4221f00b08a2fdfa38a0a45849e81a0419bab91286bec697bbabe7d42ccfaf4db336568f384a2c85dc6040dcf79cdb76da1ff7ffde7433d048b6155ea57e88b9
SSDEEP

3072:0tj/T8HuWeHMTnMUiIZelGds7vqs9EjEWx2AoOdEX:0lLIuvMTMUNZGymvqsEEG/oOd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3713e40bdeee3f423e1221f73bfa4288af4ec97a21df2d95a00b956f22c130fa

Files

3713e40bdeee3f423e1221f73bfa4288af4ec97a21df2d95a00b956f22c130fa
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Dev\git\tigertrade-client\Setup\TigerTradeSetup.App\obj\Debug\TigerTradeSetup.App.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ