3d922c29dcd9bdb03c9eb0a77978effea241fae74942d2c080eb14502fa4f16a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d922c29dcd9bdb03c9eb0a77978effea241fae74942d2c080eb14502fa4f16a
Size

134KB
MD5

e79726c0e44f3d890545c0e4fd49ac9b
SHA1

f2316a52fed104b7fe61041db97729de94d28b12
SHA256

3d922c29dcd9bdb03c9eb0a77978effea241fae74942d2c080eb14502fa4f16a
SHA512

76d9cfdb42a6f236fe98679266f1a9ff755a7cfcac59dd7a80f79564168e1a615592272042af1ae77276d4fc5788e20b8241d0da15f063ec4a6b53312321678c
SSDEEP

1536:Ml59ZPVb9cpOlaLNtfwrFBOfmZLwN8mgN7/8t0H/8WjZOpkdwKwN1o2Xu2cLcMIu:Ml59ZN5iY6fwrFTW4YpS7BR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d922c29dcd9bdb03c9eb0a77978effea241fae74942d2c080eb14502fa4f16a

Files

3d922c29dcd9bdb03c9eb0a77978effea241fae74942d2c080eb14502fa4f16a
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\EarthSoft\default\EDP\Formats\NYSDEC\obj\Debug\NYSDEC.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 113B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ