4c703768553a6465d4257aa91a889982b44141db158bb2828c2af3b8137df2d5 | Triage

Sharing

General

Target

4c703768553a6465d4257aa91a889982b44141db158bb2828c2af3b8137df2d5
Size

481KB
MD5

b491fee4cdf9a2facc22ae1513a2ff70
SHA1

8637034b66dc1138895d0a654141244239c1c24c
SHA256

4c703768553a6465d4257aa91a889982b44141db158bb2828c2af3b8137df2d5
SHA512

7cdc7641c84612ea839dc1366ac75a766947d2edfd332ed6ae14362352ce78fe5350b0f12eaca636972d4bb12aae7eacd0214419e4ceb1bb9f5ca13a9c58826c
SSDEEP

6144:lmR5WmNLwj8y41wb2VVTIg1dh5XgoUDXlvS6g75KRCJSzEmCyvknxU7n2jHWsvL:ltmNGb4OiV8g1dhaD9f4SzhCNnxrj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c703768553a6465d4257aa91a889982b44141db158bb2828c2af3b8137df2d5

Files

4c703768553a6465d4257aa91a889982b44141db158bb2828c2af3b8137df2d5
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.TeamFoundation.WorkItemTracking.ControlsCore.ni.pdb
C:\A\1\3\obj\Release.AnyCPU\VSIntegration.Client\MS.TF.WorkItemTracking.ControlsCore\Microsoft.TeamFoundation.WorkItemTracking.ControlsCore.pdb

Sections

.data
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 361KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ