49c26b456f487f085fd38062286e302684a81bdab71d11ce1706b9113e93800dN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49c26b456f487f085fd38062286e302684a81bdab71d11ce1706b9113e93800dN
Size

43KB
MD5

e6080dc81074d8e6a059d2e4226ea400
SHA1

4e226607e3a926cb910eb7d9ef5d0fac911a70c0
SHA256

49c26b456f487f085fd38062286e302684a81bdab71d11ce1706b9113e93800d
SHA512

c6b7a59148205c1ea87dfc7fdf044479ed609f281e14e17a16937ac9b0a1ed00fd21e27efe1086fd49fe761bfc6ce8eb9c5b7b0d0454c5edcdb42444ffa5dace
SSDEEP

384:06QISSYpHDfxfvplHGq2sJD/dGRXYcjWeMaXkcMViJ+YgAgHIRW1tLsp/ITrBDHg:06NSbHVGq92HWerdgC/SpQfVNo4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49c26b456f487f085fd38062286e302684a81bdab71d11ce1706b9113e93800dN

Files

49c26b456f487f085fd38062286e302684a81bdab71d11ce1706b9113e93800dN
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\Utilizador\Documents\Trabalhos\Bruno\Lethal_Company_Modding\InteractiveTerminalAPIGit\InteractiveTerminalAPI\InteractiveTerminalAPI\bin\Debug\netstandard2.1\InteractiveTerminalAPI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ