19d6383737f50aec881343b470535a0de9c47fe6a7f02450407f3dbac5c59d80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19d6383737f50aec881343b470535a0de9c47fe6a7f02450407f3dbac5c59d80
Size

62KB
MD5

99ab21b50b2de3ad925ae61899bb848f
SHA1

3cfda50101b4ded2f0f6dd19c79c3fce10917e80
SHA256

19d6383737f50aec881343b470535a0de9c47fe6a7f02450407f3dbac5c59d80
SHA512

a8bd46ba227594bda6901f28028fe16bfcccad4c71c790e35bb850d3e5155fe6f544c0584150db85b7eb8a0eb95d95cc49401990f6d2f2c43fe75b8630f5df28
SSDEEP

768:yAO9GEKhGPr3ed6Lcc9x8ScdXhfRCimlRtd5OyZ8+5PZtZtZtZNn3uNOzWDBVfex:hO9fHvcdX/CJd5CUXXX3QOzW1pe0kc4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19d6383737f50aec881343b470535a0de9c47fe6a7f02450407f3dbac5c59d80

Files

19d6383737f50aec881343b470535a0de9c47fe6a7f02450407f3dbac5c59d80
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.Core.Enums.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ