4e2457e61c2b7d52db22226b54444cc5a0be2ecb3d5cd353b1b6792bd4e5e023 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e2457e61c2b7d52db22226b54444cc5a0be2ecb3d5cd353b1b6792bd4e5e023
Size

93KB
MD5

65e0a421a78a6b7188ac18818f82d84e
SHA1

e8f0c59b7e736df52c9b172d55724cdff49a4f91
SHA256

4e2457e61c2b7d52db22226b54444cc5a0be2ecb3d5cd353b1b6792bd4e5e023
SHA512

94e7507f33d165c2ba00efb00952d71125e6244e14a4dceeb95aea53af43912aaa9193ff7f665db4a1e42ecd81d9ebb9eba2b798a277e8bc83b78bc5ff735eca
SSDEEP

1536:RfYo/4Aayv+LzzHvfB8xO+pbkbBC70LYsxR42TdgTRWHV8OZ:RQk4AayUfHvUO04bAMYsxfdg415Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e2457e61c2b7d52db22226b54444cc5a0be2ecb3d5cd353b1b6792bd4e5e023

Files

4e2457e61c2b7d52db22226b54444cc5a0be2ecb3d5cd353b1b6792bd4e5e023
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\Adaware\webcompanion\Common\Lavasoft.Utils\obj\x86\Debug\Lavasoft.Utils.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ