e1664090bb654c7b64213ddd9842c3020adcafd979a3dab3533600a0cf3f163f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1664090bb654c7b64213ddd9842c3020adcafd979a3dab3533600a0cf3f163f
Size

415KB
MD5

515f6e61a9097007b30ca859977b72c9
SHA1

26ed4358a73d49b7b40709428126c49aa4ce4514
SHA256

e1664090bb654c7b64213ddd9842c3020adcafd979a3dab3533600a0cf3f163f
SHA512

2b62df19c23271169dc9489c188bbbc7b79545535303473ad6222531c396bf15792c21208d6b17866b97527e52ee33dfc772f60de70463e848bdcf0ade8d7e3f
SSDEEP

6144:hpQC2khFVppB9C0No4ulBAq++bgF00AdRVjk0uhlZW5WI8nTLEczGyWKgI:bQJkh3pXcu+bgmMhlIGTb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1664090bb654c7b64213ddd9842c3020adcafd979a3dab3533600a0cf3f163f

Files

e1664090bb654c7b64213ddd9842c3020adcafd979a3dab3533600a0cf3f163f
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

\\INSTALADORES\Desarrollo2019\Proyectos_2021\TPV_Net_PG\Pedidos\Form_Base\obj\x86\Debug\Pedidos.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 410KB - Virtual size: 410KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ