fc4e0cbe5c7a26fd452a6e080000d37fcc76b10a28efda338cd8157fd41411d8 | Triage

Sharing

General

Target

fc4e0cbe5c7a26fd452a6e080000d37fcc76b10a28efda338cd8157fd41411d8
Size

6.2MB
MD5

6932876c15883d86f2a0b774dd85b3d6
SHA1

0d635584eeb46dd3b98fbdb4d7f80dc6ac7fe15e
SHA256

fc4e0cbe5c7a26fd452a6e080000d37fcc76b10a28efda338cd8157fd41411d8
SHA512

5770b0119152f07d35aa652755c674b19b8e25a6e86b0f6746147d2a7fa1ff4cc67e7e090bf42bdc4b948532220aa11047bd19464ec2cf9eefb14a4403c446b7
SSDEEP

49152:8sGUBSoOvrug8y8skLOomDUlm4iwkYch9deQvdhDsMC+CTDmInE8/96xc:8sNnOvvKsNomDUlm4iwk9tvjDYTDZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc4e0cbe5c7a26fd452a6e080000d37fcc76b10a28efda338cd8157fd41411d8

Files

fc4e0cbe5c7a26fd452a6e080000d37fcc76b10a28efda338cd8157fd41411d8
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/roslyn/artifacts/source-build/self/src/artifacts/obj/Microsoft.CodeAnalysis.CSharp/Release/net8.0/Microsoft.CodeAnalysis.CSharp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ