flarfo-SaveUtility-0[.]3[.]1[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

flarfo-SaveUtility-0.3.1.zip
Size

95KB
MD5

2a059a4ab2178d83e6a00f2626875a19
SHA1

37f438c90fab5dbcbee388739126d52aa33888fb
SHA256

c57721a48e9455ad9f4631c6129c1ea3cff7d219e9102092cad83d27843ab6e1
SHA512

26ab73aa1f9002e3cf9287b5b369576e353c238c8d9925a125d10825ee194531642655f51dc7044905b3471af7a8ddbf00e0b94ca4b0684f087813b92b860e05
SSDEEP

1536:3v1B87T7qF4GyxNSzMUkHYyYAQrrpLrWwK2GXgbsg3wbY8hrnlbeNn450/X6jpx:/1oTRodqbCrpf3K27OYql8n4UX6jpx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SaveUtility-0.3.1.dll

Files

flarfo-SaveUtility-0.3.1.zip
.zip
README.md
SaveUtility-0.3.1.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\noahw\Source\Repos\Muck-SaveUtility\obj\Debug\SaveUtility.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
icon.png
.png
manifest.json