f2f11a36804693906ae4db6372647c2c86c0765e2a70da4f7ad0f661ec8e13e4 | Triage

Sharing

General

Target

f2f11a36804693906ae4db6372647c2c86c0765e2a70da4f7ad0f661ec8e13e4
Size

165KB
MD5

774d1743e438eea59d0f9d3a533f9cb2
SHA1

63bcdcb23d192297339880e7d14edccc46c5df7d
SHA256

f2f11a36804693906ae4db6372647c2c86c0765e2a70da4f7ad0f661ec8e13e4
SHA512

e8b21b2080f856f0aeb6e76b4319d7f94e1e17f9aa957419afc27b2e241063deb75bfaa739768acdf079ae49c1b8437a64ec3568027f7756efdc1b7387589709
SSDEEP

3072:WbNN1aBuMLdFSicp+yhNLmtOEoYX3CWNnCmDvyuv446xDf6pCz:WbNNUTSpp+yhgtOELCWNTS5xDft

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2f11a36804693906ae4db6372647c2c86c0765e2a70da4f7ad0f661ec8e13e4

Files

f2f11a36804693906ae4db6372647c2c86c0765e2a70da4f7ad0f661ec8e13e4
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/runtime/artifacts/source-build/self/src/artifacts/obj/System.DirectoryServices.Protocols/Release/net8.0-osx/System.DirectoryServices.Protocols.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ