376d9857f08d57228d134ed4e9a53cea718acc94b127091a716bf2dd2343c9f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

376d9857f08d57228d134ed4e9a53cea718acc94b127091a716bf2dd2343c9f9
Size

188KB
MD5

b325e0f6794c0da508fb3d41da4d9f35
SHA1

a85ec210a51513295b3cf2720b8c3bf3e518d446
SHA256

376d9857f08d57228d134ed4e9a53cea718acc94b127091a716bf2dd2343c9f9
SHA512

a2af798f68862025f24ef7985da10966a57cd50dd5d6f6e9b3ffb433adc2fd802d77cb5aac5adcb79503c4cb8c5fea8a6e7959a8393acfb8e4d61ad9e7ac4141
SSDEEP

3072:bN2QOszuzbUKBiN4gIybjCsvq2f00CuX4H82OBx+VxN13BzFjkYHP+dY+n:b4Q5zCbUKBiNIybjC4q10poHZRVxNVrW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
376d9857f08d57228d134ed4e9a53cea718acc94b127091a716bf2dd2343c9f9

Files

376d9857f08d57228d134ed4e9a53cea718acc94b127091a716bf2dd2343c9f9
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.Core.Wcf.Common.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ