5cb8cce2fa035e1fe7dbad38b4abbe6f98074f852e5c4dffa6af6745af2538f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cb8cce2fa035e1fe7dbad38b4abbe6f98074f852e5c4dffa6af6745af2538f6
Size

2.5MB
MD5

895d22142e4e1f0488915a73a4e6a5bd
SHA1

ae240f6356362a622135bd014f3a841cabfd5b32
SHA256

5cb8cce2fa035e1fe7dbad38b4abbe6f98074f852e5c4dffa6af6745af2538f6
SHA512

c5e3f827a73b0ac89f16440631a1bae57309f344586d2270f8a127a3e639b87581a187dbe79f0513fbdd641df769a5faf88b4427fa7aa4bf15bd9e856bfe4c30
SSDEEP

49152:c3lhQTnAh9WPPmQzk2HkAxE6wjqIBRHfKbNqOlM04DCOhM:AhQTnS2HkALwOIB1ibNqOlM04DCOe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cb8cce2fa035e1fe7dbad38b4abbe6f98074f852e5c4dffa6af6745af2538f6

Files

5cb8cce2fa035e1fe7dbad38b4abbe6f98074f852e5c4dffa6af6745af2538f6
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

G:\iMobie_Files\Working\PhoneClean5_64\ImobiePodLib\obj\Debug\iMobiePodLib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ