a2aa73138e96b04615e727a0b3db28ba8094a3da015f6f7dcd225a83db7a9ba8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2aa73138e96b04615e727a0b3db28ba8094a3da015f6f7dcd225a83db7a9ba8
Size

476KB
MD5

0a0ca1e891eb709e6d9635c839d13ca8
SHA1

3dda4708b5de41c14113473d4a175e8ad1bb1b68
SHA256

a2aa73138e96b04615e727a0b3db28ba8094a3da015f6f7dcd225a83db7a9ba8
SHA512

88b221fff5f4dab496db8b5f37b275d9caf90f0c79a024d82330e47d8af2fc540de52da40183dd86e2922f043ed06919d55e02fc12f09007d9323d2ce9337239
SSDEEP

6144:eFSQmgHtR5JPwsycFnabUI0t9lZFd2ZH3Sr8ZzDHzcKqnjNmM:eWcFnURiPFd2ZHiQZzcKq5mM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2aa73138e96b04615e727a0b3db28ba8094a3da015f6f7dcd225a83db7a9ba8

Files

a2aa73138e96b04615e727a0b3db28ba8094a3da015f6f7dcd225a83db7a9ba8
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.VisualStudio.TeamFoundation.Build.ni.pdb
C:\A\1\3\obj\Release.AnyCPU\VSIntegration.Client\MS.VS.TeamFoundation.Build\Microsoft.VisualStudio.TeamFoundation.Build.pdb

Sections

.data
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ