5df8c2415ef5f24d202d2a4753c76eab8fa57c1b1449f2493dcbaa2a54778c27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5df8c2415ef5f24d202d2a4753c76eab8fa57c1b1449f2493dcbaa2a54778c27
Size

5.7MB
MD5

f63550f3dbdfe525fd6bf56620dd2ab8
SHA1

2ddf372316b696a09f10fce7ba87f467e3d63cca
SHA256

5df8c2415ef5f24d202d2a4753c76eab8fa57c1b1449f2493dcbaa2a54778c27
SHA512

9ba7cc36f002f42066b82306dd8c1143a86f71c113c652c4fe37c095c76418226a38b4e6902f18b57f85a84f2dc7c6291ff1d7101a99ed9aab5984812451bdfb
SSDEEP

98304:HZvbfnnwk/mCGshQp3q/gKWNtyyjsGC1wuviWga2lR3P0lxXgD6QLu:tbvnwFsipa/gVyylC1IQcR4XS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5df8c2415ef5f24d202d2a4753c76eab8fa57c1b1449f2493dcbaa2a54778c27

Files

5df8c2415ef5f24d202d2a4753c76eab8fa57c1b1449f2493dcbaa2a54778c27
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\dev\Aquaforest OCRSDK\sdk-3.0\src\OCR\Extended\Main\Aquaforest.ExtendedOCR.Manager\obj\Release\Aquaforest.ExtendedOCR.Manager.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ