3e1167483141720dda19bd1b6840bc354c0b69380b3ff9337f88ede97a995243 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e1167483141720dda19bd1b6840bc354c0b69380b3ff9337f88ede97a995243
Size

3.4MB
MD5

353ee15a2cc050dc58526ac312822e5f
SHA1

7b9faee7562e8a8254a9dc5ec149eb8a9953006d
SHA256

3e1167483141720dda19bd1b6840bc354c0b69380b3ff9337f88ede97a995243
SHA512

393cb5183ed0da953963d4ff60c163d99114273c061cb5f3ab981f76bf2699ff6a9957684ee84d2a286a084f1ec2ebfbbaf6c4d37289b6e56f5413d1d127c170
SSDEEP

49152:6RrANRlQOI3501gfKEND5w7sl1kywAOZcLsmvk4y9cBaBi+YVQyZU2QJMh:iXfKENDAs/s7ZcLsmvkPPBi+C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e1167483141720dda19bd1b6840bc354c0b69380b3ff9337f88ede97a995243

Files

3e1167483141720dda19bd1b6840bc354c0b69380b3ff9337f88ede97a995243
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.VisualStudio.TeamFoundation.ni.pdb
D:\a\_work\1\obj\Release.AnyCPU\VSIntegration.Client\MS.VS.TeamFoundation\Microsoft.VisualStudio.TeamFoundation.pdb

Sections

.data
Size: 825KB - Virtual size: 824KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ