48babbd69050fab7e230c53966f0bad24b93e32213aa66df3759f884535ab321 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48babbd69050fab7e230c53966f0bad24b93e32213aa66df3759f884535ab321
Size

28KB
MD5

2d3eabd3ceaf21f21986d8854797d981
SHA1

35724fa8e3885cef31027f92aa7d527d12dde146
SHA256

48babbd69050fab7e230c53966f0bad24b93e32213aa66df3759f884535ab321
SHA512

6a4d6d31d34621ee94ed45f55531434902e9516a3f917ebd4b997b7f93f23763e7cdb2d258c7d9e0322f53f4777d4435afe0661408305d88b8c3cbcf100adb66
SSDEEP

768:l9D8IaLktZKg5doa6814V+tk84NJ0lBcJ4FzD3MUp3bJL:jDfVZKkdoa681i+tgiFdtL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48babbd69050fab7e230c53966f0bad24b93e32213aa66df3759f884535ab321

Files

48babbd69050fab7e230c53966f0bad24b93e32213aa66df3759f884535ab321
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\TeamCity\buildAgent\work\ad1fb2583d3124a9\LP.Security\obj\Release\Croc.LP.Security.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ