AutoBillPay_v1[.]0[.]zip-68-1-0-1711313262[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AutoBillPay_v1.0.zip-68-1-0-1711313262.zip
Size

4KB
MD5

12f47e32fd86713f4f5a5c7a828f75b8
SHA1

046ef00e13c7542d2cb0390684c6f167a604fea4
SHA256

a2cc5196b96e9a210b1d25e06dedf23cdeee85c6d7fbb4a130830d34580577b5
SHA512

e55e79f786d07173d4430af53824b96c7d3232b2aa03d0bc33583ec4dc21bc051ae2467b2fd013cb4a8d84cf0a2b25a805bcc158cebeaa5dc68a32632251a862
SSDEEP

96:kEUrSzuqlEzuHisbvlOuFy3+YWB75IPrBwjfWLsn:4uu6EKHhYD+3BA+yLsn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AutoBillPay.dll

Files

AutoBillPay_v1.0.zip-68-1-0-1711313262.zip
.zip
AutoBillPay.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Users\james\Documents\Supermarket Simulator Modding\AutoBills\AutoBillPay\obj\Debug\netstandard2.1\AutoBillPay.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ