665b9b3bd2eb555e37d15b8503d6e425e2c81dad55790498a06c1c3ddd4c27b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

665b9b3bd2eb555e37d15b8503d6e425e2c81dad55790498a06c1c3ddd4c27b3
Size

4.0MB
MD5

9c9747cf459caef413b90f81d5574bfe
SHA1

e67db7a2913473add2a83a681555016c7be7be79
SHA256

665b9b3bd2eb555e37d15b8503d6e425e2c81dad55790498a06c1c3ddd4c27b3
SHA512

3a1a245fae2432f0c2787983a699f2ee200bac7be9e7acb125b6e62759431d4142ce74df58d928e48856ced42895863cd704779f786c78d5290cb9aafb53c102
SSDEEP

49152:9FaaLY/MJTtFP8S1CSeAPTBONEz++1RF0OcZvXn3Esg9KbPH1ZZm63UeK9Z:9FTz/8S1CSeAPTBONEz++1RXspK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
665b9b3bd2eb555e37d15b8503d6e425e2c81dad55790498a06c1c3ddd4c27b3

Files

665b9b3bd2eb555e37d15b8503d6e425e2c81dad55790498a06c1c3ddd4c27b3
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\Workers\Worker90\IDEToolsNext\repo\CodeRush\Foundation\Engine\DevExpress.CodeRush.Foundation\obj\Release\DevExpress.CodeRush.Foundation.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ