d3b7733b53afdbc39609bf8856faf6f7bb3c44b2b505b9c7ff55beef7c9aea11 | Triage

Sharing

General

Target

d3b7733b53afdbc39609bf8856faf6f7bb3c44b2b505b9c7ff55beef7c9aea11
Size

373KB
MD5

15e08dee48341ad64a02c07d0ba3d5a3
SHA1

9c0b41eee8b017043580eb4a5707420d317de5d5
SHA256

d3b7733b53afdbc39609bf8856faf6f7bb3c44b2b505b9c7ff55beef7c9aea11
SHA512

1316940f8a1f410e504469bc87a40b989de905eccb099b15caa97862e5d12a93fa1c1f99344ee70810e7caa0af3d81255e788c98b3c55bc9c3b9572108d0688c
SSDEEP

6144:bGTnDzEu6WxImmYQjK5lr02Kqpv2actJBvpngVVAGHBoIK:bKnBmjjK302Kqc7BvpnCAMBf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3b7733b53afdbc39609bf8856faf6f7bb3c44b2b505b9c7ff55beef7c9aea11

Files

d3b7733b53afdbc39609bf8856faf6f7bb3c44b2b505b9c7ff55beef7c9aea11
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\BuildAgent\work\a5702033b047a861\Controls\C1.Silverlight.Data.Entity\WPF\obj\GCRelease\C1.Data.Entity.4.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 371KB - Virtual size: 370KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ