67cb2cd9397e2164edddd362f54efefd1e5cff81b8a2f1f6c5ef100cd83350c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67cb2cd9397e2164edddd362f54efefd1e5cff81b8a2f1f6c5ef100cd83350c4
Size

2.2MB
MD5

34dbf87bc63393a5a6a7bf44f9ae6b4d
SHA1

0b984b7baf02a74b575be1cdf5d4aa75ef825770
SHA256

67cb2cd9397e2164edddd362f54efefd1e5cff81b8a2f1f6c5ef100cd83350c4
SHA512

95097a150ef090aba2addace7aa952840e7d907ed98752741bc8e44c6c92a6f6f0a1a9f06fb86059b8debf998f685f5e4a052523e67f22f686e61c9c31233b9b
SSDEEP

49152:xVvOlHaMyzUH2oLlcw/zYDpc8owNVQq3:xVMaMyzUvLx/zscw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67cb2cd9397e2164edddd362f54efefd1e5cff81b8a2f1f6c5ef100cd83350c4

Files

67cb2cd9397e2164edddd362f54efefd1e5cff81b8a2f1f6c5ef100cd83350c4
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

\\INSTALADORES\Desarrollo2019\Proyectos_2021\TPV_Net_PG\Inicio\Form_Base\obj\x86\Debug\Inicio.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ