46495a4670d890cf4c8f931eb738e661674a263dd99eae0602050f42c6dfc758 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46495a4670d890cf4c8f931eb738e661674a263dd99eae0602050f42c6dfc758
Size

216KB
MD5

8714cd04fd8b1f5e687f7463219c74ba
SHA1

256c3086cdee0a3c09325254b7448311fd2c7a00
SHA256

46495a4670d890cf4c8f931eb738e661674a263dd99eae0602050f42c6dfc758
SHA512

07fdcd7d1610e1bc8f5ec9015b531d5b5d2662b948a3f67c2ac032f28e92a12ae8d9b88eeecc3035a10f92e45b09f2231597bb5f982544340b4aca16b08409bb
SSDEEP

1536:sxSZRLpklyFbpMAoELbFhlCvMhOLSOK8ff6tEOpfKnO8TvN463bj/xLUYF8RlHeU:cERylyFbpMAoY8qa8fKnOwvRPx4tRr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46495a4670d890cf4c8f931eb738e661674a263dd99eae0602050f42c6dfc758

Files

46495a4670d890cf4c8f931eb738e661674a263dd99eae0602050f42c6dfc758
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\JWU\V14.0\EDWcollector\Driver\Devices\Echelon\EchelonMeterBase\EchelonMeterBaseUI\obj\Release\Goerlitz.EDW3000.Collector.EchelonMeterBaseUI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ