C:\Users\Lachlan\source\repos\EpiclyCosmetics\EpiclyCosmetics\obj\Debug\netstandard2.1\EpiclyCosmetics.pdb
Static task
static1
General
-
Target
EpiclyCosmetics.dll
-
Size
9KB
-
MD5
c02464ae2369fc5ed7aa75e64d753cbf
-
SHA1
88714aad080377cb186ca9de1497044095cc59e6
-
SHA256
38c60cfc5994e749279179aad9680bea4cc8e917eb65a178d5be971a66b64fec
-
SHA512
f9ee96c41cc4aeb3b33dcfe1da34d68687ce79d65437ebf834271cb947dd5665e8d2effa8e89382127da26383842285230a415be57f1ddf2751137062e01a750
-
SSDEEP
192:XPQncCEagc14SU/QD6VV0reEpQT47uND5TM8sjejhSORgRVQpZJqhIIV:/QncCEagc1HU4D6r0reEg47UDS8sjejU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource EpiclyCosmetics.dll
Files
-
EpiclyCosmetics.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ