7a0ff493dc465f3d5223ac758409909e498f7824eed8fae92520227c23e8e733 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a0ff493dc465f3d5223ac758409909e498f7824eed8fae92520227c23e8e733
Size

93KB
MD5

47f29f99f134467e96cf55c9b54aaadf
SHA1

b3e0331a5263614bad9fe4ac4e01aa4c37a01cce
SHA256

7a0ff493dc465f3d5223ac758409909e498f7824eed8fae92520227c23e8e733
SHA512

d7e7c0df1fe1486a9aea13b628291d60cdd6fa307ab21d0c839dbda33f6fb21c67bd8106638a00302979f0cad7f43d780f0dba487a2108b39e2f1da1e188a4f3
SSDEEP

1536:PeO2izVrVRh2gHTmQFmLWl66I9hRw2WXI1M1Z51ZI1Zgk:N7RrV7HVDChRw2V1M1Z51ZI1ZZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a0ff493dc465f3d5223ac758409909e498f7824eed8fae92520227c23e8e733

Files

7a0ff493dc465f3d5223ac758409909e498f7824eed8fae92520227c23e8e733
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\JWU\V14.0\EDWcollector\Driver\Devices\ModbusV2\ModbusBaseV2\ModbusBaseV2\obj\Release\Goerlitz.EDW3000.Collector.ModbusBaseV2.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ