8cd6a0b061b43e0b660b81859c910290a3672b00d7647ba0e86eda6ddcc8c553 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cd6a0b061b43e0b660b81859c910290a3672b00d7647ba0e86eda6ddcc8c553
Size

210KB
MD5

4f40997b51420653706cb0958086cd2d
SHA1

0069b956d17ce7d782a0e054995317f2f621b502
SHA256

8cd6a0b061b43e0b660b81859c910290a3672b00d7647ba0e86eda6ddcc8c553
SHA512

e18953d7a348859855e5f6e279bc9924fc3707b57a733ce9b8f7d21bd631d419f1ebfb29202608192eb346569ca9a55264f5b4c2aedd474c22060734a68a4ee6
SSDEEP

3072:AY300VkAKMkZAQXSMUIG/qpZOMMu7tp425/g8XnXAxQjvAyBbE2IuT5K:N300abAQXSIpp425/g4XAxQj8sQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cd6a0b061b43e0b660b81859c910290a3672b00d7647ba0e86eda6ddcc8c553

Files

8cd6a0b061b43e0b660b81859c910290a3672b00d7647ba0e86eda6ddcc8c553
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\dd\trinity\appnet\fx\runtime\pipeline\VSTOAddInModel\CAA\objr\i386\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.pdb

Sections

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extrel
Size: 512B - Virtual size: 113B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ