ed79fbebbf535869eca6db0db4569fd74bb11aa8a39fdd5f4c64e1a227828098 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed79fbebbf535869eca6db0db4569fd74bb11aa8a39fdd5f4c64e1a227828098
Size

63KB
MD5

e8f234c59b9302f6873fb8a852669a04
SHA1

0ca38e1d3b5b7bf8670c67495e0b87b2b46caa9b
SHA256

ed79fbebbf535869eca6db0db4569fd74bb11aa8a39fdd5f4c64e1a227828098
SHA512

a082a3789d4f1169eafe7cd968fa13151f3adf3f97abef3fca42b0ba6b5f03a0e8a49d6ed5bd17709263a5bce93a9b2c985c1e6e45603274f00eee1fbee4c6df
SSDEEP

1536:v4mypNQvxwZisjmghqBBszfmyXXfVG+u:v4yvxw/SBszuyXXda

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed79fbebbf535869eca6db0db4569fd74bb11aa8a39fdd5f4c64e1a227828098

Files

ed79fbebbf535869eca6db0db4569fd74bb11aa8a39fdd5f4c64e1a227828098
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.Client.Navigation.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ