af29d45b6827944b064c56683b0238e0d4ac83ee96b277c0cfb9e1bb32ea4b80N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af29d45b6827944b064c56683b0238e0d4ac83ee96b277c0cfb9e1bb32ea4b80N
Size

959KB
MD5

f0384a6e8131ef0eb91d826f467a26e0
SHA1

c17a27f5e6b7e6f8b040454d96ea110b81763410
SHA256

af29d45b6827944b064c56683b0238e0d4ac83ee96b277c0cfb9e1bb32ea4b80
SHA512

33d98a979525e7e4d726a9e0f83d101512472a38e8aedb9a1de706e35e93bacb9693f56852e55800baed0e11ca9630f791b78a6d87744a43eda503b81c1846b2
SSDEEP

12288:Y6a9XlxwLKA8s8d4oJG5zrYDkd73sCx1a+9jH7muaA:gwes8jIxY+Xz7mu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af29d45b6827944b064c56683b0238e0d4ac83ee96b277c0cfb9e1bb32ea4b80N

Files

af29d45b6827944b064c56683b0238e0d4ac83ee96b277c0cfb9e1bb32ea4b80N
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\dev\unity-workspace\peglin_gog\Library\Bee\artifacts\1900b0aP.dag\Assembly-CSharp-firstpass.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 957KB - Virtual size: 957KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ