Rehm.ViCon.Client.Editor.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9029e9690632c11f10c1c376b79d4110N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9029e9690632c11f10c1c376b79d4110N.dll
Resource
win10v2004-20240709-en
General
-
Target
9029e9690632c11f10c1c376b79d4110N.exe
-
Size
112KB
-
MD5
9029e9690632c11f10c1c376b79d4110
-
SHA1
5c1466b3b36fe47a45144092e60dbbdf57069b41
-
SHA256
69522ba875948f3f18052eedbfb240f3de7c3045364c4522ed7c627b25189285
-
SHA512
297733e4fd6c9c750486423e0690d5c3fa872c8593fdaca5da75c44d765e5d58325701bec983cd374ad0ca5da8f85e8c4416426a3513abf0582f4b536bf3ed4a
-
SSDEEP
1536:l9lTMVb9RHrj33mMaSYsLyncfjZZI8Sa2tzFsmBUEABleiEUuDG4TnAbhlceh:lfT29V3SALyncfjZZIbzrBUrBlgq7h5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9029e9690632c11f10c1c376b79d4110N.exe
Files
-
9029e9690632c11f10c1c376b79d4110N.exe.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ