2b612f901f8cbbb573a47f862d1db35f85897e8ada1c04aa95ffd04fc6cf8bc3N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b612f901f8cbbb573a47f862d1db35f85897e8ada1c04aa95ffd04fc6cf8bc3N
Size

71KB
MD5

41502f35ddc76261ee8ecb761204b530
SHA1

516b33d02f2940792a53f7ee9831faae8ae5bd04
SHA256

2b612f901f8cbbb573a47f862d1db35f85897e8ada1c04aa95ffd04fc6cf8bc3
SHA512

79662b07340e666a8511b39f1f4b1a61107bb4c3ba55744aaec1074f658b5b72f23ee55b5359439f13a7319ee1e06e14bd779d80793d315e6840875389310fdd
SSDEEP

1536:vhDMSIEFPpKkVO8f0PpPrjtFg2KTtvM6W8Ho9jC:951LOxd3U2KTyE3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b612f901f8cbbb573a47f862d1db35f85897e8ada1c04aa95ffd04fc6cf8bc3N

Files

2b612f901f8cbbb573a47f862d1db35f85897e8ada1c04aa95ffd04fc6cf8bc3N
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Virtek.Services.VisionAndProjectionService.Client.pdb

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ