ddd4962bfc4bc0b5d65159484b2f610a81e70d13cd556a2181deded6b4015586 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddd4962bfc4bc0b5d65159484b2f610a81e70d13cd556a2181deded6b4015586
Size

1.1MB
MD5

bd7aeb60ca062e3686fba818617d443b
SHA1

cb03cb209c62e115d3e14a2834396a8e7afc34d5
SHA256

ddd4962bfc4bc0b5d65159484b2f610a81e70d13cd556a2181deded6b4015586
SHA512

dad20fde4b870f4bd154e85b1fa7cc543351a608f39217fa962e097324b75ef2e4f999dca8786ce661cecfd382a008764df14c07d2f97f642934c9ddfc258d40
SSDEEP

12288:otdBLzP6L5tJ6s3kvdGe1s1ZTmJbgZqwvUjOTsXXI8FkoNTKI+2steTlSUUvw:otdBXPyNrB1ZTmWkFTlsvw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddd4962bfc4bc0b5d65159484b2f610a81e70d13cd556a2181deded6b4015586

Files

ddd4962bfc4bc0b5d65159484b2f610a81e70d13cd556a2181deded6b4015586
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\PROJECTS\clevercontroldotnet\CleverControlDotNET\CleverControl\bin\x86\Release\sockets.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ