525f156146848a16e8be59946a3aaa3e43184a88e548e628f70d6186702bc88d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

525f156146848a16e8be59946a3aaa3e43184a88e548e628f70d6186702bc88d
Size

468KB
MD5

fb75175cf8fb70ed1340e2d1a2f20d3b
SHA1

1997ab522c17951200e879dfbd710e5f8e579b20
SHA256

525f156146848a16e8be59946a3aaa3e43184a88e548e628f70d6186702bc88d
SHA512

a00951428660ef2956c334b97879973832b1d6d61b14625effd4b4248b47b50c06714acbec52bbd4b08ff93b781f4e5ea64ce816dc996e2f09b55b2302b420ef
SSDEEP

6144:KhWodMa0X/CD2lEUGhKQF3UKFY6J0avMN/15gMYadAA1r:p+MaTD2lqprFY/e95mr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
525f156146848a16e8be59946a3aaa3e43184a88e548e628f70d6186702bc88d

Files

525f156146848a16e8be59946a3aaa3e43184a88e548e628f70d6186702bc88d
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\misor\source\repos\Trimel.ISSAMO.Lib\ISSAMO.GUI\obj\x86\Release\ISSAMO.GUI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 466KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ