0a2b2147ffe127fb6df002bc4d3a25abc939bbcf54bab63cc6b7ed208d6a5b21 | Triage

Sharing

General

Target

0a2b2147ffe127fb6df002bc4d3a25abc939bbcf54bab63cc6b7ed208d6a5b21
Size

100KB
MD5

8c1cf6e2a3ade871aec12f97b8e79c39
SHA1

25d08324ede7df8cf07e0c27c4b98a531e24b55d
SHA256

0a2b2147ffe127fb6df002bc4d3a25abc939bbcf54bab63cc6b7ed208d6a5b21
SHA512

186eca870457a245183cb403550f40cbfe68446261a252a496f9b55f537aa7a5a9510d275a8a9ce47310fd6329e8eabb5ed3635049d04b404f8ac6b751dd8857
SSDEEP

1536:xd3jr10K6P+MbDBV2BaT4WcPiXTODlJhaOEsCL3186r333CrL5cemCzFrOcrm1cw:C2XvREsCLFvG5zJei0HehjrCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a2b2147ffe127fb6df002bc4d3a25abc939bbcf54bab63cc6b7ed208d6a5b21

Files

0a2b2147ffe127fb6df002bc4d3a25abc939bbcf54bab63cc6b7ed208d6a5b21
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.Client.VacControls.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ