0a9e86b5b242ec1d66f24be81dce2664ab953155d68a9aefc9602a2851f11ee1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a9e86b5b242ec1d66f24be81dce2664ab953155d68a9aefc9602a2851f11ee1
Size

24KB
MD5

4ef08407c3fe83b43d185e86804d6f8a
SHA1

c473bcd811b0e64eadd27b10ddeac2b089e4b463
SHA256

0a9e86b5b242ec1d66f24be81dce2664ab953155d68a9aefc9602a2851f11ee1
SHA512

f81e748b8fae82f25d44783a73f674c3d9ee74d952508ac8c0c4d98523b9bb658f7bd27d1790d2162bd86fb7c812cc2181d82792e57295eb7f1d08f418c91ce6
SSDEEP

384:zHWFxz4JBrW+5h1+aCM3k69R9pnUkO2akIGt6HHDPax1:zq14JB516M0w9pnsh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a9e86b5b242ec1d66f24be81dce2664ab953155d68a9aefc9602a2851f11ee1

Files

0a9e86b5b242ec1d66f24be81dce2664ab953155d68a9aefc9602a2851f11ee1
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Runtime.Serialization.Primitives.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Runtime.Serialization.Primitives\Release\net8.0\System.Runtime.Serialization.Primitives.pdb

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ