1147b6c22ff80276c89c5f2eff45f723a6a4221bcc2f22abfac0586cded6c7dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1147b6c22ff80276c89c5f2eff45f723a6a4221bcc2f22abfac0586cded6c7dd
Size

355KB
MD5

cd0e55d3ef923bdfafe616641b43c837
SHA1

af9e61b5661132fcde2380d81ee2e68e5a4a6bb6
SHA256

1147b6c22ff80276c89c5f2eff45f723a6a4221bcc2f22abfac0586cded6c7dd
SHA512

759ab10752b7b32d973d37b8c5a3150f7577d7b8c5ebb06b69d5716531d93fb87c25f6fdbd25c76cfdbd6bfe9ce1d07dd33786a6c60289c3f5c7e4fe45da06aa
SSDEEP

6144:/0iNy9bfd3w41PH0i0VU2GNS/Y5SSSnQ:/0iabFvH8nN/Y5SSCQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1147b6c22ff80276c89c5f2eff45f723a6a4221bcc2f22abfac0586cded6c7dd

Files

1147b6c22ff80276c89c5f2eff45f723a6a4221bcc2f22abfac0586cded6c7dd
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Jenkins\workspace\OwenLogic_Release\StEditor\STLanguage\obj\Release\STLanguage.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 353KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ