6d96f7859ab6aec5a31dd4ba26fbf0ef4a5052542798bcef22d06f09b8dec4dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d96f7859ab6aec5a31dd4ba26fbf0ef4a5052542798bcef22d06f09b8dec4dc
Size

31KB
MD5

d5a9d7a79b43743d85d19d09900347d8
SHA1

5a1725be020d078a031534f407094758bbab7852
SHA256

6d96f7859ab6aec5a31dd4ba26fbf0ef4a5052542798bcef22d06f09b8dec4dc
SHA512

ccfa3381169c4a21e58f5e178220c60c1b3840fcdfcc3d016ca355935ca842791ff8e0d870f78daa792097511e60911395e5a95e6244a29cda856bd34f1282e4
SSDEEP

768:MqBC5upaMhgCq2ZyimyV/G6Xsetj0nfwu9Xx4:jBRThgKb3/5xynm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d96f7859ab6aec5a31dd4ba26fbf0ef4a5052542798bcef22d06f09b8dec4dc

Files

6d96f7859ab6aec5a31dd4ba26fbf0ef4a5052542798bcef22d06f09b8dec4dc
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

.\Library\Bee\artifacts\1900b0aP.dag\Unity.VisualScripting.State.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ