268ca150aad4de272cfab379a2254b19b025f5beddf1eebe90881070ea64ac54 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

268ca150aad4de272cfab379a2254b19b025f5beddf1eebe90881070ea64ac54
Size

200KB
MD5

5aaa1b58276c15a10be4fc04d9550521
SHA1

0278f440ebe75fae0068388bc08f3c03163d3503
SHA256

268ca150aad4de272cfab379a2254b19b025f5beddf1eebe90881070ea64ac54
SHA512

e3bc01eb6a1bae0750b0bcfaea8343ebb188f586053eddfc90597b1b1ca60336a395a5dd89be8f3a321b50b62c3b7d8a6fd5300455b60fb8701035901bc9d5b9
SSDEEP

3072:4zi8kL7MIDz6NkT1ch8VIBGKOjIfJbzlWG1keFjrmWv9HpwHbSAa/mdb7WG0bCid:4O8kxD5TCcLIfJbzDkWrh9P8b7s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
268ca150aad4de272cfab379a2254b19b025f5beddf1eebe90881070ea64ac54

Files

268ca150aad4de272cfab379a2254b19b025f5beddf1eebe90881070ea64ac54
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Dev\workspace\v14\Visual C#\Common\Prd.common\obj\Release\Prd.common.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ