622cc69a0552ecd0b7a5803d214a97ea08239d223876d1cebdb6299e9593ba37 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

622cc69a0552ecd0b7a5803d214a97ea08239d223876d1cebdb6299e9593ba37
Size

65KB
MD5

96d46b48b71daf9b244c9befb9c7c9d6
SHA1

ab4017564c320bd6c3857c5b02ce40451b98f3fa
SHA256

622cc69a0552ecd0b7a5803d214a97ea08239d223876d1cebdb6299e9593ba37
SHA512

a1a09fb3ce6620b1e78453728de9c392408a87519640476ae51deee1f04b6cc649b8c6ea41144d338ed77fe2cdab376341dc5e0bcf88499e7f8040a40563e1c9
SSDEEP

1536:ndrP7ys0DXB5KNeJhVAPyqrfoiyA25shjI5tWjBQQ2qaCoH/:d7y1XB5KNe5yyIoiyA25shjI5ti6dqar

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
622cc69a0552ecd0b7a5803d214a97ea08239d223876d1cebdb6299e9593ba37

Files

622cc69a0552ecd0b7a5803d214a97ea08239d223876d1cebdb6299e9593ba37
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

FluentValidation.AspNetCore.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ