376faff6830296f07c2fde2ee6da72bdede74191997b59a7d53bf740a3501ff2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

376faff6830296f07c2fde2ee6da72bdede74191997b59a7d53bf740a3501ff2
Size

845KB
MD5

f2aadaa3576fdd2f3e8251294e394a0b
SHA1

5410ae5350a6782557fde7084661320d565b1c67
SHA256

376faff6830296f07c2fde2ee6da72bdede74191997b59a7d53bf740a3501ff2
SHA512

ed690f7bbd41a8a3a1bcfecd18c36b0498573623d8f90a78c8c865ff2925e895f642b4941157497a0d70886299a465d027a3c9f5ffd88eef623f72b2bcbf7de3
SSDEEP

12288:LQ33WJUbaglAwEb5a/oNEcD9T37ERzE2G7WDOL5I8F5wrMXjSp2tr23t5HC2yOU:LQHWJUbaglAwEVaAD9QE2G5ZEmY5MOU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
376faff6830296f07c2fde2ee6da72bdede74191997b59a7d53bf740a3501ff2

Files

376faff6830296f07c2fde2ee6da72bdede74191997b59a7d53bf740a3501ff2
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\broGideon\Desktop\ThemesLib\Themes\obj\Debug\net8.0-windows\Themes.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 843KB - Virtual size: 842KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ