1eba8a4891e06ff23046d3897fa0d01ae494d5a649518c40a95e3a33c539ce5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1eba8a4891e06ff23046d3897fa0d01ae494d5a649518c40a95e3a33c539ce5e
Size

90KB
MD5

b12ebe3e330db2d8d90eec175afba0b0
SHA1

272942be96137b611dc7337fe7d02291f41b1015
SHA256

1eba8a4891e06ff23046d3897fa0d01ae494d5a649518c40a95e3a33c539ce5e
SHA512

ebf42ee586298a063e7c7026703611d26960f02e4f5e77776aa63f7443504e1ec8a370ae47ccfc8944990c72bc604bbb0daebbca325bb0b1fb6b15e1903beff2
SSDEEP

1536:7zRbrzikxPh5CaQXsKQAlR1UkGcdDdFU6kDvdi+zIITYZIDkK5:7zhPiSCaQ8KLfGchbyDU+zfTYS44

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1eba8a4891e06ff23046d3897fa0d01ae494d5a649518c40a95e3a33c539ce5e

Files

1eba8a4891e06ff23046d3897fa0d01ae494d5a649518c40a95e3a33c539ce5e
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.Core.UI.Contracts.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ