a615a15d55673ed78de7ed4cc6fd3507d53f218ce807f34b22963d0059ea3f36 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a615a15d55673ed78de7ed4cc6fd3507d53f218ce807f34b22963d0059ea3f36
Size

60KB
MD5

d22376737498686379ce0aaf5ca09ce0
SHA1

d32a65440a2cc65d536f0c81a965963c18846dc9
SHA256

a615a15d55673ed78de7ed4cc6fd3507d53f218ce807f34b22963d0059ea3f36
SHA512

84d888e5ebbf7645df7c8018abf6ed274fba634df33777623fba3af68619d3c412b7ea85c71995857adb79f65d5238d2fef78cb8eb36c3b76a52cbaa77c395e6
SSDEEP

1536:PXSau3FxEHhL9uSNlYfnEnIElIoGrhNAIgJ4O:P5u3FIhEiFnIWIoGr4IgJn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a615a15d55673ed78de7ed4cc6fd3507d53f218ce807f34b22963d0059ea3f36

Files

a615a15d55673ed78de7ed4cc6fd3507d53f218ce807f34b22963d0059ea3f36
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\jenkins\workspace\WindowsClient_Prod\WebSocket4Net\obj\DellRelease\WebSocket4Net.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ