832e6ab22c7c4888fa2b1ae0808407640835bd326fe0005f047f4a14d02119c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

832e6ab22c7c4888fa2b1ae0808407640835bd326fe0005f047f4a14d02119c4
Size

69KB
MD5

fd3650c309db0d98575e5ef44aeecda5
SHA1

14a600ff2d2fc2652eb02dd95351038bcb704963
SHA256

832e6ab22c7c4888fa2b1ae0808407640835bd326fe0005f047f4a14d02119c4
SHA512

25b2280d0e7f8b8e466e42faea679dbc06e0f0602fc041c991b7d9a5b4bd34aca882e5d5c8a780f6296842ad13769cf74ea49499ed3d90e57957035ee0a6491c
SSDEEP

1536:i8kC9APo51vIg333YY/GQbYKJaECOccO/jr9Y9586asz8EMdXcZVSiB:5XfvI2YYeDKQET5818YwVSi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
832e6ab22c7c4888fa2b1ae0808407640835bd326fe0005f047f4a14d02119c4

Files

832e6ab22c7c4888fa2b1ae0808407640835bd326fe0005f047f4a14d02119c4
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.TeamFoundation.Git.Client.ni.pdb
D:\v2.0\A2\_work\85\obj\Release.AnyCPU\Tfs.ExtendedClient\MS.TF.Git.Client\Microsoft.TeamFoundation.Git.Client.pdb

Sections

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ