8a826504aa8285f73957d4ae8f42a72972f8f7e7116d6602ee3fd0f36f7783be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a826504aa8285f73957d4ae8f42a72972f8f7e7116d6602ee3fd0f36f7783be
Size

6KB
MD5

5068a520becc5b3cb7dbe2d60ea37f90
SHA1

0435883f7fd6fd71e97738f4b7a0f496168159f5
SHA256

8a826504aa8285f73957d4ae8f42a72972f8f7e7116d6602ee3fd0f36f7783be
SHA512

6a8049641e253eb4203df353184428063b66654095a4d69c7f2084149bf4b9d5d495699349696298b3d6cb2e8541a013b477af9e277128500835e032912d97c3
SSDEEP

96:0f1lUO+yLj4ptors4lKaeIeGXrNLQTpFUnfDmDNCwDH62Y/W+XWv:09D4pmr/lKaeIeGXxLBnJo6NW+XWv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a826504aa8285f73957d4ae8f42a72972f8f7e7116d6602ee3fd0f36f7783be

Files

8a826504aa8285f73957d4ae8f42a72972f8f7e7116d6602ee3fd0f36f7783be
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.ComponentModel.DataAnnotations/Release/net8.0-linux/System.ComponentModel.DataAnnotations.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ