Dx9paste[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Dx9paste.exe
Size

3KB
MD5

47e754a998dfc602f656627507d17c4a
SHA1

7fe87c1386b5ff96b4f6454aa0c8d26ca9b96686
SHA256

1405a3a83d29182f4831df4b928d2c7345c0bfab8edba5d9089d4e8149b30061
SHA512

69208566afc2bb037eafdbb95b2ccf4dc6924b8fbd43c905bf54c6e5e73330228e8b1b98fbd4b1f26385849357f54929a1452d957d376838625ecd57b5281b9b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Dx9paste.exe

Files

Dx9paste.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/storage/emulated/0/Documents/Dx9paste/Dx9paste/bin/Release/Dx9paste.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ