3fb6c7a78256d79cc0473382ce5350eb7a614b85f2d0f835137edbe77b84d53dN | Triage

Sharing

General

Target

3fb6c7a78256d79cc0473382ce5350eb7a614b85f2d0f835137edbe77b84d53dN
Size

161KB
MD5

dd3f0926f46bed03fa13767f79d92e60
SHA1

8b28fc24b4cdba0dc028e6365e9c3d7745fc72a2
SHA256

3fb6c7a78256d79cc0473382ce5350eb7a614b85f2d0f835137edbe77b84d53d
SHA512

5c2269e25090c711c4c25fc24d85bcd8e63924757d7724b192f281c7b132d3e2ff1ff26a09e2b8aeab2b803c36afb2c902fcd406d5b95ed512ac08f4fcb7970d
SSDEEP

3072:vpnzlGVT+xd2v4O8P8tDtYDTkLtZl+PlVLo8sRS1wj/D55/uizKHf:v5JGVT+xd2vt8P8tpYDTkpzOlVVoBzKH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fb6c7a78256d79cc0473382ce5350eb7a614b85f2d0f835137edbe77b84d53dN

Files

3fb6c7a78256d79cc0473382ce5350eb7a614b85f2d0f835137edbe77b84d53dN
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\CProjekte\FreeDB\obj\Release\FreeDB.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ