f5cb7f14009245fbb6f8945f3f855f668744f23607618b3dd416c22a92307809 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5cb7f14009245fbb6f8945f3f855f668744f23607618b3dd416c22a92307809
Size

106KB
MD5

5b80f3808de45f69b0a309e0c7a1ce96
SHA1

91d4b12a8748950f22dc5a7498e09376495ca8fd
SHA256

f5cb7f14009245fbb6f8945f3f855f668744f23607618b3dd416c22a92307809
SHA512

4061af05c1e35f5f46476c10d4cf51ca595093657244baf484b111697f5b7a52ef45bd767c4ca76852556aa710f2a23c0413898244f0fb39c414a1c370ba4996
SSDEEP

3072:yFwKZCLT2UDvIYjfrtlFfyUSt29I9Thu4jtYNptHhg:y2LICBbVo291

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5cb7f14009245fbb6f8945f3f855f668744f23607618b3dd416c22a92307809

Files

f5cb7f14009245fbb6f8945f3f855f668744f23607618b3dd416c22a92307809
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Temp\drone-cbA6LaXGvGFtweiN\drone\src\WebCompanion\Lavasoft.AppCore\obj\Release\Lavasoft.AppCore.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ