a1146391c8dfc604cbab97de51343f32ef80a3f1930a4c81f374a3d7df2374ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1146391c8dfc604cbab97de51343f32ef80a3f1930a4c81f374a3d7df2374ee
Size

6KB
MD5

88a8324f469afc51eb54eabefbe9ed51
SHA1

367fe99e3f2a6b05cb540d38fcce153941c240cd
SHA256

a1146391c8dfc604cbab97de51343f32ef80a3f1930a4c81f374a3d7df2374ee
SHA512

eaa4ea823665e885c8daf8253f17175cffc931333ed3ebdeff538cfc0b8706e869780357428cf19ed465b8a54bdb1e011b5e10f8a2b51a676f7aea5166cf65e1
SSDEEP

96:J1awpKZiT/QxvOLDmDD2+D/rcWwM1BwWU:/awwZFxX2eIWp2W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1146391c8dfc604cbab97de51343f32ef80a3f1930a4c81f374a3d7df2374ee

Files

a1146391c8dfc604cbab97de51343f32ef80a3f1930a4c81f374a3d7df2374ee
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

/__w/1/s/artifacts/obj/System.Diagnostics.Contracts/Release/net8.0/System.Diagnostics.Contracts.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ