326cfb603cd4bc75a0845a4305f841ca0b364b0085330a8f81907c4b2c42b58b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

326cfb603cd4bc75a0845a4305f841ca0b364b0085330a8f81907c4b2c42b58b
Size

12KB
MD5

12176bb74e6a78b31395f7982ff9d3a1
SHA1

e91be2617ac5fef5d97e6e809c310052c00ab8f6
SHA256

326cfb603cd4bc75a0845a4305f841ca0b364b0085330a8f81907c4b2c42b58b
SHA512

1faa9f2ac10d5ef47ee5e3613fede5c8079569653101747558c9082230d525cc77fe591294be9a64d896f0fa8cac67561ba8622a263613e00b269bafb283f900
SSDEEP

192:tC4HUNSRmj4lKH2BmSsx3U364K3aXUV4jzFe+TaoZn9VToW5oYIfKD5NIZ:3HUNSRmj4lKH2YiuV4jzFe+TNZ9VEW58

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
326cfb603cd4bc75a0845a4305f841ca0b364b0085330a8f81907c4b2c42b58b

Files

326cfb603cd4bc75a0845a4305f841ca0b364b0085330a8f81907c4b2c42b58b
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Windows\TEMP\drone-cbA6LaXGvGFtweiN\drone\src\Common\VPNService\obj\x86\Debug\VPNServiceWCF.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ