9a78ff4af4ceadb79d8613e5f165ca90N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a78ff4af4ceadb79d8613e5f165ca90N
Size

392KB
MD5

9a78ff4af4ceadb79d8613e5f165ca90
SHA1

d1a0bc4f474122f06b46fbc9c2fab95782c07c77
SHA256

379876dd701f57d71a02e2bcbaaf5f6db2a771c815c3f137e6f6b347298f7323
SHA512

afd5621798819630ad6eebf16e22b593cb323ac58a022a4ad86ceda15d09a0b6e2e08b9edd06eeb0aebb604e660d872890cc4ea685722209b097f612cefc1264
SSDEEP

12288:Zu7tU9wubIYctO4tbnSGoTepHVu9yHFUsCl:I+9whtbSmpHVu9yH+sC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a78ff4af4ceadb79d8613e5f165ca90N

Files

9a78ff4af4ceadb79d8613e5f165ca90N
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.CSharp.ni.pdb
D:\a\_work\1\s\artifacts\obj\Microsoft.CSharp\Release\net8.0-windows\Microsoft.CSharp.pdb

Sections

.text
Size: 380KB - Virtual size: 379KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ