3ac899d1f280504be6536423016e835d850825feacca571490ac4be11c1cec8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ac899d1f280504be6536423016e835d850825feacca571490ac4be11c1cec8b
Size

78KB
MD5

32a4b4fd4f997a9c85b97199806049d7
SHA1

5c450301057b36b0d7e13191e7d83113258180e7
SHA256

3ac899d1f280504be6536423016e835d850825feacca571490ac4be11c1cec8b
SHA512

664d3f41d3ae74c79e969b289f8f42813c7d1ee28402e3d9afc0924ead96c9d0365478bd48c2ef3e3be6fc3f5db5b332af18d86086a3c792e66ab12fc15f6c10
SSDEEP

1536:l5VHUrWePExJ3Qpt0m6ylqIjHj0jVuUuKz6V25whwCBr79Ft4:l/H8OAv6ylqIsjeh/x79

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ac899d1f280504be6536423016e835d850825feacca571490ac4be11c1cec8b

Files

3ac899d1f280504be6536423016e835d850825feacca571490ac4be11c1cec8b
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

NativeInterop.ni.pdb
c:\jenkins\workspace\Clean_Start_GitHub_1_Solution\Win32 Bridge\NativeInterop\obj\Release\NativeInterop.pdb

Sections

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ