ed36d09118f2b63d269147790e46eb2ac96c6a7ef2034a3c72a1dca840ac2b7e | Triage

Sharing

General

Target

ed36d09118f2b63d269147790e46eb2ac96c6a7ef2034a3c72a1dca840ac2b7e
Size

1.2MB
MD5

90c62cce81e52a126e0410b3311f2acd
SHA1

b029f40917bf132fc82afc60e2ead6d8172b13d0
SHA256

ed36d09118f2b63d269147790e46eb2ac96c6a7ef2034a3c72a1dca840ac2b7e
SHA512

e32c03e814be726a165401aaf19766c3e5c54dee022bad7b4683a5f7c265acc296bfd1af87055dad8d7f77e2b66e8b4d27ee3d0f56b193eb8b8fe58a74c76ab5
SSDEEP

24576:pJmNm8ml1IEJwPKYFhTyQSySWrA4uEkDYCAF0+3qqDQ70:km8ml1IEGPKYFhTz2YCAF0+3qqDQ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed36d09118f2b63d269147790e46eb2ac96c6a7ef2034a3c72a1dca840ac2b7e

Files

ed36d09118f2b63d269147790e46eb2ac96c6a7ef2034a3c72a1dca840ac2b7e
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Jenkins\jobs\7.4_Patches\workspace\csharp\common\BusinessLogic\obj\x64\Release\SeeTec.BusinessLogic.pdb

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ