d3c0795a319755cce3044dff6c8e63d4e2711e29099338371242a14a292bb8c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3c0795a319755cce3044dff6c8e63d4e2711e29099338371242a14a292bb8c5
Size

6KB
MD5

c190796d8a79282a633ced607ae03be4
SHA1

71bb79a2568394501d2611e48dac649ef9aa3e0a
SHA256

d3c0795a319755cce3044dff6c8e63d4e2711e29099338371242a14a292bb8c5
SHA512

a096933ddb3456391f7a219d38dd5ac4a4fba026d919bfb10127609563cad690929796a89053d3354f89f8b1b052a82ee6d6bf47bf38279c7fcfe56148a46b03
SSDEEP

96:S3l9uykJGX0YxvjUd8DmDNCwDeo6gMWbCWv:A7hXhxAdGvo6gMWbCWv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3c0795a319755cce3044dff6c8e63d4e2711e29099338371242a14a292bb8c5

Files

d3c0795a319755cce3044dff6c8e63d4e2711e29099338371242a14a292bb8c5
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.Dynamic.Runtime/Release/net8.0-linux/System.Dynamic.Runtime.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ