ff3dc62d60a6b44be95dd1a27893dd170af848d83544a887f76726068f5499b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff3dc62d60a6b44be95dd1a27893dd170af848d83544a887f76726068f5499b6
Size

44KB
MD5

d3db614002d1bf64695d2a012753ae5d
SHA1

57e762e6fc27ac818d2bda3bbee9ceb2c847f6a9
SHA256

ff3dc62d60a6b44be95dd1a27893dd170af848d83544a887f76726068f5499b6
SHA512

577cc08bf5259ebbc42bcaa57f220d420722c5366e75f8bbd4cf77ec1400bce926486b464a45351072884a89cfa1c1f5c4aec5ecb2bf77b7c69fa2df1ebad76c
SSDEEP

768:gS/7a4wKWsDDgNYWpSsSL9IV7+VRjQM4V4E:gS/7a4WA0YgSsS9LqMBE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff3dc62d60a6b44be95dd1a27893dd170af848d83544a887f76726068f5499b6

Files

ff3dc62d60a6b44be95dd1a27893dd170af848d83544a887f76726068f5499b6
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\BLAZAM\BLAZAM\BLAZAMSession\obj\Release\net6.0\BLAZAMSession.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ