bb56c641ef27aa26e3bde1e53cc8d771b0e7d0888b25d06a1c634bca5380bddaN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb56c641ef27aa26e3bde1e53cc8d771b0e7d0888b25d06a1c634bca5380bddaN
Size

566KB
MD5

17f4dfa8c309cd1b1aadd3626d34c8a0
SHA1

955b87d6d7bb557ec58d31d96fb3895620ea0923
SHA256

bb56c641ef27aa26e3bde1e53cc8d771b0e7d0888b25d06a1c634bca5380bdda
SHA512

429e437a62688dd38db23b9adef134d5fe45fd040beaa38addc7e302d9cbcee2ef3e604aa10285bb941f35ed8ccdc1b1db14b1d621ac8d5a8c785cdfac654584
SSDEEP

6144:YyOhMAc47rM9oUgk4/gEHLUgkoUfk4v4f8487MbbEgMI7AzLcJUtdMXM2gE477Mh:Yy0BeyUCSgsTy4BmAF46cO80YAghZQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb56c641ef27aa26e3bde1e53cc8d771b0e7d0888b25d06a1c634bca5380bddaN

Files

bb56c641ef27aa26e3bde1e53cc8d771b0e7d0888b25d06a1c634bca5380bddaN
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\nem\Downloads\forge-api-dotnet-client-master\forge-api-dotnet-client-master\src\Autodesk.Forge\obj\Release\Autodesk.Forge.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 564KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ