67ce863798ea56b6b81cbec7db740188939b498682e2b009b9f353e0e2521358 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67ce863798ea56b6b81cbec7db740188939b498682e2b009b9f353e0e2521358
Size

31KB
MD5

47233150f92ece8fb18b6ab1aadede5b
SHA1

de018021a7cdfa5411df44a2b9a64e07e011a3d4
SHA256

67ce863798ea56b6b81cbec7db740188939b498682e2b009b9f353e0e2521358
SHA512

87b296a02e0fe3515aa49ec3877b8397be3ff666cb03df07a3776d6a2f36c935af9f2ffe4247276d9084d7d3f81d457e6610be5146295d8619272e714493dc5f
SSDEEP

768:MY3QVRBlK7nmUt7f3r0XrJ/a/zeGP9UM4hxCRm:vWhW7Prarpa/zeGP9UH/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67ce863798ea56b6b81cbec7db740188939b498682e2b009b9f353e0e2521358

Files

67ce863798ea56b6b81cbec7db740188939b498682e2b009b9f353e0e2521358
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\项目\农金通后台监控\分支\安徽\fgeMonitoringPro_client\fgeMonitoringPro_pcClient\fge.pcClient.utils\obj\Debug\fge.pcClient.utils.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ