034d1434e640127d24cb776381cdaae121787233a795af55058beea7bccd53f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

034d1434e640127d24cb776381cdaae121787233a795af55058beea7bccd53f7
Size

294KB
MD5

af24419739485fcd60a11775b6e9dd91
SHA1

25b264c1be6784bc6aacb82cbe04f8f6cf2e94f5
SHA256

034d1434e640127d24cb776381cdaae121787233a795af55058beea7bccd53f7
SHA512

8f618d92332a6f0926a9e902a984633ac5b90f0d40d2088535a2aab2889d00cb1a1dd93e4856cb1f6f2cba6cf3799cf0d36223d1075f0a3f653ba1894bed401a
SSDEEP

6144:sYaWfcGOWYdtdD9Z7g7jsKLc4CLs/t3ne0WqMVW9:8Z7gcke0WqMV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
034d1434e640127d24cb776381cdaae121787233a795af55058beea7bccd53f7

Files

034d1434e640127d24cb776381cdaae121787233a795af55058beea7bccd53f7
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\NSVNProject\TLS_BG\Monitor\MonitorBG\obj\Release\MonitorBG.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ