0d9e89a58ff01f087954d743fa92b4065313dc70efa03b5f542a283ff12d40e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d9e89a58ff01f087954d743fa92b4065313dc70efa03b5f542a283ff12d40e3
Size

67KB
MD5

a7ace0d301186860d7f51617323a1dde
SHA1

e7f1d35a3c3da0cb7061a8b17c53867c0740db04
SHA256

0d9e89a58ff01f087954d743fa92b4065313dc70efa03b5f542a283ff12d40e3
SHA512

328b02b89ef270f6aff2435d62568de09558688c5c7942eb351f71caa282e58dd41b7c5dd1fc25c10f1ac20f224d7a36770d500e2644f7eefa8ab98d7a2911e9
SSDEEP

768:MWW+go/vl6T1r0wjN8UlPcq9JJ/nmphFVD80RP9E+9oMz83FEBn9fLjFyC:hW8O0w58UlPL97PmnztVGV3aFXFJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d9e89a58ff01f087954d743fa92b4065313dc70efa03b5f542a283ff12d40e3

Files

0d9e89a58ff01f087954d743fa92b4065313dc70efa03b5f542a283ff12d40e3
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\andrei\nop_sources\src\Plugins\Nop.Plugin.Tax.FixedOrByCountryStateZip\obj\Release\net7.0\Nop.Plugin.Tax.FixedOrByCountryStateZip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ