9ab570e717e287c239f938c19edb58e0N | Triage

Sharing

General

Target

9ab570e717e287c239f938c19edb58e0N
Size

3.0MB
MD5

9ab570e717e287c239f938c19edb58e0
SHA1

b835cbfc813f17bb1d65f0d8a86a47293550d378
SHA256

8a9821051d77f205576db35af9b9c5196db5b0dd991223e827ccf782f860d35e
SHA512

ce270df9520d70914e541305d0fe6acaa7267903f5fb64f5c039913c758b548474a3d530d10d8dc2b19f2a1ef6c0f4960d1254531febadf7ce6ae21fc92913bb
SSDEEP

24576:44+9WLFGusnT1k1chNAxkUE2sYiVVs47putL1SfP69vPxvddfBrWuJzeo:44+AzsfYkP2shZuzSXq5nfBrWuJzL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ab570e717e287c239f938c19edb58e0N

Files

9ab570e717e287c239f938c19edb58e0N
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Private.Xml.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Private.Xml\Release\net8.0-windows\System.Private.Xml.pdb

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ