30849ca0f9e9cb91ab496a605e9f252a3e6601466de494564a1ec7eaa2c39e66 | Triage

Sharing

General

Target

30849ca0f9e9cb91ab496a605e9f252a3e6601466de494564a1ec7eaa2c39e66
Size

12KB
MD5

3ab96b6eef87b6930b5eaf324fc0a41d
SHA1

918ffe51bf73ef1985c7b65dee1641b1f563f058
SHA256

30849ca0f9e9cb91ab496a605e9f252a3e6601466de494564a1ec7eaa2c39e66
SHA512

294ce151ebb18d0c54c655053e4f2f5ac5f3bc9f942b22dc76e25531182c2eae213d8f2e092b025a3d25ef6d82645ff0e7b01c925e39f307da4345a8ce217572
SSDEEP

192:ozN7KIqfF1oL6/OFDTTYUHSjlQD3RfZ02obEBBcTFEO:ozNafF1jmZ/AjlQD382UEIT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30849ca0f9e9cb91ab496a605e9f252a3e6601466de494564a1ec7eaa2c39e66

Files

30849ca0f9e9cb91ab496a605e9f252a3e6601466de494564a1ec7eaa2c39e66
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\work\GLXT\common\obj\Release\tools.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ