d4a54df2cb0d3a036512d8f92e6e0cff9546cf41feb07be209916fbe2723976a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4a54df2cb0d3a036512d8f92e6e0cff9546cf41feb07be209916fbe2723976a
Size

110KB
MD5

aa03bf9b834e5bd7777a5fbf70c40c1b
SHA1

50a13116af9ee287f8a3e6e0ac342e072230259a
SHA256

d4a54df2cb0d3a036512d8f92e6e0cff9546cf41feb07be209916fbe2723976a
SHA512

77f60712091cf9a0d992eaa63b7000ce9d2bb3d534f3590d0011f3efa9d47b90c2a07fdf610555b6d4c9d1bd2498244c4cc3dbcc4be5c084145df44395bcb7d8
SSDEEP

3072:ZFFLLddfVYkkeeMMyjRRHHZZzmmp5FH6UyyqIpQpoiN2i+KPaze:ZFFLLddfSkkeeMMyjRRHHZZzHqIpQpoZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4a54df2cb0d3a036512d8f92e6e0cff9546cf41feb07be209916fbe2723976a

Files

d4a54df2cb0d3a036512d8f92e6e0cff9546cf41feb07be209916fbe2723976a
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

PDB Paths

E:\vs2019\项目\ZxRat\Binaries\Debug\Plugins\RemoteCamera.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ