471e01b04fec55c2dd76145f15f5558af3d1fa5936d0792296277b1939505043N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

471e01b04fec55c2dd76145f15f5558af3d1fa5936d0792296277b1939505043N
Size

240KB
MD5

f1de08c8fe2a7213730b8efdfa6a9300
SHA1

822286b50138d6059b5eb4ea70cad4fa97c861d2
SHA256

471e01b04fec55c2dd76145f15f5558af3d1fa5936d0792296277b1939505043
SHA512

41bceeb4c224825591b284f51d13c02e70ae36d52e3df590f96c9bdf1ae73193df7dbe8b1edad9635b61664c03eef94f0ca184270b4510aafa46e723665dcaac
SSDEEP

6144:Gq9mFM+ozTqC/mmblk1XQ1p9GjBVgbv6t1EYD+6VV8hv7:nmq+iRG99EYD+6V6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
471e01b04fec55c2dd76145f15f5558af3d1fa5936d0792296277b1939505043N

Files

471e01b04fec55c2dd76145f15f5558af3d1fa5936d0792296277b1939505043N
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.VisualStudio.Modeling.Sdk.Integration.Shell.10.0.ni.pdb
f:\dd\eft\mdf\runtime\ToolIntegration\VSModelBus\objr\i386\Microsoft.VisualStudio.Modeling.Sdk.Integration.Shell.10.0.pdb

Sections

.data
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ