7afdcc8d812174ba6824ce5f49f006e4f22b57db95c3ec2bec0181bf36ac90e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7afdcc8d812174ba6824ce5f49f006e4f22b57db95c3ec2bec0181bf36ac90e0
Size

4.9MB
MD5

3b3b855c55c6dfaf6ecd72397e33caa9
SHA1

682d38207a3dd3fd788828133759e7fc05a49bad
SHA256

7afdcc8d812174ba6824ce5f49f006e4f22b57db95c3ec2bec0181bf36ac90e0
SHA512

380d811648b029b2b07632800f0a994214402961511c9417f0d23e6e6430f414952edfd23a66167562276c753de7541c94e92ca0d428197dd30d09613fff26ee
SSDEEP

98304:mXfAkXvGGqsukEjpHAlPvg3LtQfgF1Wq9sKZ6wNAn:mcEY7t6g/VjoM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7afdcc8d812174ba6824ce5f49f006e4f22b57db95c3ec2bec0181bf36ac90e0

Files

7afdcc8d812174ba6824ce5f49f006e4f22b57db95c3ec2bec0181bf36ac90e0
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

\\INSTALADORES\Desarrollo2019\Proyectos_2021\FacturaPymes\Ventas\Principal\obj\x86\Debug\Ventas.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ