91e0e7748a31c6504ce27fe66fd8a0339d3c5285dd618bb76f7451e7c2a8ac06 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91e0e7748a31c6504ce27fe66fd8a0339d3c5285dd618bb76f7451e7c2a8ac06
Size

568KB
MD5

52b2bc484c9a7c2d41def208638a8578
SHA1

7927805752c8f33ee04ff054ab9bce7e2c5db402
SHA256

91e0e7748a31c6504ce27fe66fd8a0339d3c5285dd618bb76f7451e7c2a8ac06
SHA512

72a1767912bbe8a4eb35686edbe988190da472e81f4c13e270c1978afe3f54c836a5f2c683286b6937867dd925cac4debf0314633a062a21e7e123fc75ba009e
SSDEEP

3072:ObrGZF0eaci1m2B027k9c2BbYN3F0eaci1m2B027j:5SRsQlSR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91e0e7748a31c6504ce27fe66fd8a0339d3c5285dd618bb76f7451e7c2a8ac06

Files

91e0e7748a31c6504ce27fe66fd8a0339d3c5285dd618bb76f7451e7c2a8ac06
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\domin\source\repos\DelectFile To WinRar By DominikCell\bin\Release\net8.0-windows\Dotfuscated\DelectFile To WinRar By DominikCell.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ