b47291b43ce78b1df72aa0c3d6bd298bc858e9cb072f2e2efb9b1cd0f34f65b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b47291b43ce78b1df72aa0c3d6bd298bc858e9cb072f2e2efb9b1cd0f34f65b4
Size

115KB
MD5

1bcfea11ecbffe3b4bf23b60a6828268
SHA1

ad9ab6a8bf4ddacb8beff5d5874c19e86753afc8
SHA256

b47291b43ce78b1df72aa0c3d6bd298bc858e9cb072f2e2efb9b1cd0f34f65b4
SHA512

f676087b767c33696df9533215a881091ff61eb6952c95ef6f9f37a85b1ec1554685956b5d30908c522c3de9e840273624f4a16784d6caede36c4d051b3a7b1f
SSDEEP

1536:Vlv8tOxR16raxxFa0UvwY4md46VZghqKAgLyJnGUiEuVmZ3pEM:VlvUOxR16T8SeLaGUBnZ3p3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b47291b43ce78b1df72aa0c3d6bd298bc858e9cb072f2e2efb9b1cd0f34f65b4

Files

b47291b43ce78b1df72aa0c3d6bd298bc858e9cb072f2e2efb9b1cd0f34f65b4
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.Protocol.Contracts.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ