f281e8cecc28c139cd7975742c668a2b2bc3f192d6721a3fbbc28f20b7707170 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f281e8cecc28c139cd7975742c668a2b2bc3f192d6721a3fbbc28f20b7707170
Size

44KB
MD5

b6ea3d185a92ec0e3a6fea1e8b60d122
SHA1

0b2d846a24b627ba857399136376752df96123d2
SHA256

f281e8cecc28c139cd7975742c668a2b2bc3f192d6721a3fbbc28f20b7707170
SHA512

94138a0cedf9dc069c00efc218044a532a959ad9bb5e1efbf67b073bb5e5c64e27ed679e1d1044a9456b4cef0b4a9d1e99b7ff3ff6e596cc8ed633735a8fd2e9
SSDEEP

768:7lzy4DnOjvUUUmx9JQtl8SUD2YYScvtwMhrmc3B2X:RyOOjMkxU4lPArmc34X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f281e8cecc28c139cd7975742c668a2b2bc3f192d6721a3fbbc28f20b7707170

Files

f281e8cecc28c139cd7975742c668a2b2bc3f192d6721a3fbbc28f20b7707170
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\BumiMandias\Desktop\ii_Stupid_Template\testplate\obj\Debug\netstandard2.1\Mandias Menu.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ