3316b46c412e3bfd30af04332c194181798a185048fc6ce9c07c7c3851c49398 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3316b46c412e3bfd30af04332c194181798a185048fc6ce9c07c7c3851c49398
Size

529KB
MD5

3ad8bbee6468f3a579a706f963f7cb1e
SHA1

1ce6e7ec66ba5488aac62f730ef63264f79a8f4e
SHA256

3316b46c412e3bfd30af04332c194181798a185048fc6ce9c07c7c3851c49398
SHA512

692a9ced7fe9b819c2528a9116ab3cbe7445f9d1a56de92d68f5eb5f2e73c35e84e1c61a914f24fa51cc7559cbfee8c40aaa5a19271d7901840a8775f3533bb3
SSDEEP

12288:9IowSHxh04nSPnT4hgo712U0MwW6sU8LuKwd6N/D/Hlp6nucc3q1EKl3evy2vzT4:rwSRiAY4z710o6sU8LuKwd6N/D/Hlp6R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3316b46c412e3bfd30af04332c194181798a185048fc6ce9c07c7c3851c49398

Files

3316b46c412e3bfd30af04332c194181798a185048fc6ce9c07c7c3851c49398
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\kakao\work\Source\LEGO_AAW\LEGO.App.Launcher.Square.CheckRegion\obj\x86\Release\LEGO.App.Launcher.Square.CheckRegion.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

./it
Size: - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.n8?
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.|tb
Size: 525KB - Virtual size: 525KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ