27734539a0ae2740b1a89d1b57da6bd0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27734539a0ae2740b1a89d1b57da6bd0N
Size

42KB
MD5

27734539a0ae2740b1a89d1b57da6bd0
SHA1

2b68397694b4f335b901732404c61ce45ddb0f1b
SHA256

3462127325495065fe15a1f74c6e6e856959f913713e72115e3078676ddea587
SHA512

ef831d1c542bdb85ca4fe7b121e0988cbc0c934e65001d0d35c8449c23ddbc7ab28cc70345a39a4a36a5149cefdb3e7c55c9b0cd9176c274ba0dba2c350d6f76
SSDEEP

768:E71baAVzNhjCwvIyID6tywq6MOJzOsMVVKcXwEpM:81baSz/RbUEq6d0hLKcXwl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27734539a0ae2740b1a89d1b57da6bd0N

Files

27734539a0ae2740b1a89d1b57da6bd0N
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\node-exclude\Inovance\ProductLine\Platform\Source\InoParamEditor\ExportExcel\obj\Release\ExportExcel.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ