c216e7d5b8ae686e906fa269e716f8f84ad4a46e7d5a0bc6e3454ccfc1b39c74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c216e7d5b8ae686e906fa269e716f8f84ad4a46e7d5a0bc6e3454ccfc1b39c74
Size

60KB
MD5

734c2ee8f024e11f65d357c7b879e1d1
SHA1

94569266eda77b1fd689f1882ef867b5c2219bbf
SHA256

c216e7d5b8ae686e906fa269e716f8f84ad4a46e7d5a0bc6e3454ccfc1b39c74
SHA512

d3ac4bce6fe2752ee3063ec7a9ce7248545b398554927bbdd62cb40afeb0ebf421a02c59fb2ee006bf0bc2e93262a12fdf9731873e5731c79e45e163b46403d4
SSDEEP

1536:wlpz7BIgEfgKX9DlStVho/zb5m8eikOvv:wlntY9lGf2zgqD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c216e7d5b8ae686e906fa269e716f8f84ad4a46e7d5a0bc6e3454ccfc1b39c74

Files

c216e7d5b8ae686e906fa269e716f8f84ad4a46e7d5a0bc6e3454ccfc1b39c74
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.Services.Wcf.SimulatorService.Contracts.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ