955b37994dac9b6386e4697301440751dbe9c02b4c6219a949909be491b26844 | Triage

Sharing

General

Target

955b37994dac9b6386e4697301440751dbe9c02b4c6219a949909be491b26844
Size

2.5MB
MD5

c9140e0cd8e4d8522b709d9ef360867e
SHA1

0517aa1ec1c56050097e968d4b79a63ee8dc76d0
SHA256

955b37994dac9b6386e4697301440751dbe9c02b4c6219a949909be491b26844
SHA512

37b17f2b6623d13fcfa212b7e193a2f3a086e932725065b1ab2dd8b52201893a69136806e120b7bbfa99f8875838d0ed15fff8859aee872c406d5b6118c79078
SSDEEP

49152:z3lhQTnAh9WPPmQzl2HkAxE6wjqIBRHfKbNqOlM04DCOhM:5hQTnP2HkALwOIB1ibNqOlM04DCOe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
955b37994dac9b6386e4697301440751dbe9c02b4c6219a949909be491b26844

Files

955b37994dac9b6386e4697301440751dbe9c02b4c6219a949909be491b26844
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

G:\iMobie_Files\Working\PhoneClean5_64\ImobiePodLib\obj\Debug\iMobiePodLib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ