f57251984051782bb81d57cacd2ac92a8643bacba09dd0b30adc8af01c6b3131 | Triage

Sharing

General

Target

f57251984051782bb81d57cacd2ac92a8643bacba09dd0b30adc8af01c6b3131
Size

200KB
MD5

90046414ad2fa8f6260f7ffa6ad16428
SHA1

9bb005622252dee07e6cb9005dd1ec4e1f3328fb
SHA256

f57251984051782bb81d57cacd2ac92a8643bacba09dd0b30adc8af01c6b3131
SHA512

5711e2a9aea1cd2d2faeb9db6531825d90772cba51648f528c5bd8573530b71b874cb43fcd1b44fdd22184884222a2cd2c354798487a77073fc2d1224e971241
SSDEEP

3072:Gzi8kL7MIDz6NkT1ch8VIBGKOjIfJbzlWG1keFjrmWv9HpwHbSAa/mdb7WG0bCid:GO8kxD5TCcLIfJbzDkWrh9P8b7s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f57251984051782bb81d57cacd2ac92a8643bacba09dd0b30adc8af01c6b3131

Files

f57251984051782bb81d57cacd2ac92a8643bacba09dd0b30adc8af01c6b3131
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Dev\workspace\v14\Visual C#\Common\Prd.common\obj\Release\Prd.common.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ