c1e2a16f9cbee2e06057766a36c1bf36e55dbf3e94b2c9a8cf838a61e939ce48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1e2a16f9cbee2e06057766a36c1bf36e55dbf3e94b2c9a8cf838a61e939ce48
Size

58KB
MD5

c24b973d9abfcac86e45cbc4255f1edb
SHA1

1626888b4aab39b3d7f54447a701c71b51dc3265
SHA256

c1e2a16f9cbee2e06057766a36c1bf36e55dbf3e94b2c9a8cf838a61e939ce48
SHA512

bc81fff8c31d0fcdb611540ca7b93cfd6ef638597dc63177044ab64408c181a95f6ca3dc9baf8d8bb756c3051c3297a32667e75222efa4a6247c424447f0e8af
SSDEEP

1536:BgH4/XUVRaJXbtzPy7///xQVQOfWjzjfmW5R8b:BhJXbtTy1KYjz6kR8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1e2a16f9cbee2e06057766a36c1bf36e55dbf3e94b2c9a8cf838a61e939ce48

Files

c1e2a16f9cbee2e06057766a36c1bf36e55dbf3e94b2c9a8cf838a61e939ce48
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.Service.Plugin.Condenso.Components.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ