Spawn Objects-12-0-6-0-1677689431[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Spawn Objects-12-0-6-0-1677689431.zip
Size

8KB
MD5

8fbec323ee57d2c9ce4ba89cb2b91a7b
SHA1

ebf1c22939cb44211b60bf2536539fa8574a939e
SHA256

a8680e8e62be23c1762bb751c3587811089158ce3c70d329b53756e3ba50e7b6
SHA512

2402242d621dfbc523c8b49957c325d98ef416cbbc127cbc1356f238dd39e20098aeb637219f7b921ca2cd477d61a3810ed74e3bea4f99592fa2430df2d3c5d7
SSDEEP

192:cInHkCTDFjl+eigQqXpkqcj+I2OUnjjW1m/MxgdwWIkeTDFV:cIEIDFjLigQqXpZOUj1vefX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SpawnObject.dll

Files

Spawn Objects-12-0-6-0-1677689431.zip
.zip
SpawnObject.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\poiqwe\source\repos\PlanetCrafterMods\SpawnObject\obj\Debug\net480\SpawnObject.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ