8b19d1ad4cd6397d8273bb75afb497e91a8b4d175cc2381b98258b7260783f9a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b19d1ad4cd6397d8273bb75afb497e91a8b4d175cc2381b98258b7260783f9a
Size

197KB
MD5

336048deeeab3b5d248c7407fa1459ee
SHA1

c6df80a80d9c5ddfe2ab9519aefcd645a2ff5be0
SHA256

8b19d1ad4cd6397d8273bb75afb497e91a8b4d175cc2381b98258b7260783f9a
SHA512

d75a13123d1a58df11e9f75d3a3a169299dd8c4213e180c03c04b4cf07d335a1753564ec211f6ded0b1abfa42cb5906d9b56fb020f8285f22174e452069a2d6f
SSDEEP

3072:gFRGOPUBN97RDDvKC3l0QsjqysYZv5cEGOLq4iRDR7O0I+D/8TojgN3WyA:+R3CtRDDvKC3GQEqys4H+4iVV5I+r88

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b19d1ad4cd6397d8273bb75afb497e91a8b4d175cc2381b98258b7260783f9a

Files

8b19d1ad4cd6397d8273bb75afb497e91a8b4d175cc2381b98258b7260783f9a
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.Core.TestFramework.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ