c952a767192cb48dd1af2de3862175192b89ee42670bfd71785ab16564286fa5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c952a767192cb48dd1af2de3862175192b89ee42670bfd71785ab16564286fa5
Size

35KB
MD5

cb0fa56b3f7d70bfcbf4c140d4038819
SHA1

9597c2eb6b746891472065dde728acc32c87c33a
SHA256

c952a767192cb48dd1af2de3862175192b89ee42670bfd71785ab16564286fa5
SHA512

ba94df1e083f20c465ecaf43bd7e440be4bbb48076b2404e152ee37e020a312d3db7e7ed0134e4b41240b6c956ec2d721bc223fdb5641a3aa5aef98354d70eed
SSDEEP

768:80fdjGz8ka4siuk/lVBKaOjBvHFUebbNqvIGldu1aKATlx:TdyP4jjBrbRqi0V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c952a767192cb48dd1af2de3862175192b89ee42670bfd71785ab16564286fa5

Files

c952a767192cb48dd1af2de3862175192b89ee42670bfd71785ab16564286fa5
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\ngu_g\source\repos\Server\Server\obj\Debug\Server.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ