a9104e0cf3e24bc161e2681f2cae520993175724acb0dbd1991734a119bdb4ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9104e0cf3e24bc161e2681f2cae520993175724acb0dbd1991734a119bdb4ba
Size

252KB
MD5

d66400d8b2d069ea823955f7a4f504c9
SHA1

7ad37213874d14d4c5e798e114f1e760fb63941b
SHA256

a9104e0cf3e24bc161e2681f2cae520993175724acb0dbd1991734a119bdb4ba
SHA512

8d719d9ec49f3e58c2b3729561d1dfd5a55ba5cb2c2a945cce3b50335f9714e65d8f7f6ef1be4af982eb89c02aae3a39e9c5b6f5d873645d1ba60f82539da6dc
SSDEEP

3072:UX88jmPO5tw24QwCOk9P2nCOfldEllMtDnvIfXOkjtCMaSjBOic9EGgDX/y:UXVjmP+48OaClGAtz63tCMaSj8ic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9104e0cf3e24bc161e2681f2cae520993175724acb0dbd1991734a119bdb4ba

Files

a9104e0cf3e24bc161e2681f2cae520993175724acb0dbd1991734a119bdb4ba
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/Users/bokken/build/output/Unity-Technologies/mono/mcs/class/lib/net_4_x-win32/System.ComponentModel.Composition.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 250KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ