D:\a\de4dot-cex\de4dot-cex\de4dot\obj\x86\Release\de4dot.pdb
Static task
static1
General
-
Target
de4dot.exe
-
Size
5KB
-
MD5
e4ec36a7794af9974ae5d559828aae6a
-
SHA1
ddfe58436c62d3a81098ec862f612daa7d3741c7
-
SHA256
0dd150d75641089f7cc7de58e064ce6d091a2dad87f69fa812321838efff0752
-
SHA512
328dd26f46203adc8e38c995a6aaa4e1e4d8d482f8f09a20183439e906a6041a516f0cb826aa3069559e9ef4cc79c8bde984ccb7f40d947955a355772dd34e93
-
SSDEEP
48:6LCwUlCAJkZL1zJMMGXd7dc3M0P0P56A+AvIoOdKKAVfPhvV9PPCVCQNpfbNtm:YCwdAJkHzIXd7AtsPk3vsKUQPzNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de4dot.exe
Files
-
de4dot.exe.exe windows:4 windows x86 arch:x86
Password: a
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ