ba295bef79f69ed4f47a3c8444ae67c0cec35ff3558a5f03014b6c1babdecf8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba295bef79f69ed4f47a3c8444ae67c0cec35ff3558a5f03014b6c1babdecf8e
Size

6KB
MD5

b3be6141009cbea99547912afbb55faa
SHA1

81dba2b15ea41aadd4979e61f320d3d80e906d49
SHA256

ba295bef79f69ed4f47a3c8444ae67c0cec35ff3558a5f03014b6c1babdecf8e
SHA512

bcae0e561c13c6eaa3e3114c2eefa2ad81d9fc46c79e76140e93dee1709b768567a22ad17f9a921b688904b6e39d34021e8a6d459ab8f46c22d5d67ba42b1d70
SSDEEP

96:FtdT+DnZAoJ7K7SlpyrdKs7XH7AYKG7Ln36uwuGun/C0a/exB:4nmoJ+7S7Y7bfjvFbn68

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba295bef79f69ed4f47a3c8444ae67c0cec35ff3558a5f03014b6c1babdecf8e

Files

ba295bef79f69ed4f47a3c8444ae67c0cec35ff3558a5f03014b6c1babdecf8e
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Administrator.ADMINISTRATOR\Downloads\Origami-master\Origami-master\Runtime\obj\x64\Release\netstandard2.0\Runtime.pdb

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ