c3482b5fa93db8b8adb8c14a2d4c1acb989022f5831101e8d3153db61f75634f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3482b5fa93db8b8adb8c14a2d4c1acb989022f5831101e8d3153db61f75634f
Size

71KB
MD5

bd2e73827cc7e97103577bb4f03e0916
SHA1

9b309bb693c41a93a1dd30d39c3627284630fc31
SHA256

c3482b5fa93db8b8adb8c14a2d4c1acb989022f5831101e8d3153db61f75634f
SHA512

e3b202eb2615ec39449f1b51e4753fb64206539afe1e522084ad5df06126fe6a9d789f73a9e415099f54ad8d6de7b691a92d30538669db54c93243131ae17a7d
SSDEEP

768:v2ENm64V7bBXzxjaKny/Z9a6sSXzrtf5+mEB2jJgWlGDl2tW9zkhqImlPn5S69mo:+ENhsFvyB4rS/tjjpuzkhm95S6BEVq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3482b5fa93db8b8adb8c14a2d4c1acb989022f5831101e8d3153db61f75634f

Files

c3482b5fa93db8b8adb8c14a2d4c1acb989022f5831101e8d3153db61f75634f
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.Service.Plugin.Condenso.Components.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ