5c8422889f702da5cb73113e9399336862cdba4384c9d87227025bcdaefcee1d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c8422889f702da5cb73113e9399336862cdba4384c9d87227025bcdaefcee1d
Size

127KB
MD5

b01268e4d140bca04e80cd54bec30882
SHA1

fc704176bc02908c9c989608a351369ca30e8753
SHA256

5c8422889f702da5cb73113e9399336862cdba4384c9d87227025bcdaefcee1d
SHA512

88ba8c652093a5723bf77cd411243d1d2f0979bbab77610808fa004ab6eb723dd703724573d4afa506d3d53354e3b691a5c159a2970ee4e93464d6ba36e4da12
SSDEEP

3072:RIncFZheelllqsm6EN+6JqlNdPhdS4zkEfz:RIcFWeljeRN+6JqxPK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c8422889f702da5cb73113e9399336862cdba4384c9d87227025bcdaefcee1d

Files

5c8422889f702da5cb73113e9399336862cdba4384c9d87227025bcdaefcee1d
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.Core.UI.Helper.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ