f2ff34530a19c2ea0d94b1f6b7e254dcf7f3917e91e8c47b2eb4c402bb127d5bN | Triage

Sharing

General

Target

f2ff34530a19c2ea0d94b1f6b7e254dcf7f3917e91e8c47b2eb4c402bb127d5bN
Size

104KB
MD5

b66473eee65b9037b5c010455d27b730
SHA1

24c3b765a0a9de5d4860d2e537bf5cc2b8681b08
SHA256

f2ff34530a19c2ea0d94b1f6b7e254dcf7f3917e91e8c47b2eb4c402bb127d5b
SHA512

cf887bdcd4cce602471562a5ae897fa3eb0762371998aa21ec7b6c6bc6ffaf281126c2e90bce1410e3c5310a6813ab36886a90a507aca786bdc43f974d381475
SSDEEP

3072:D2ph7K1mWmrs6bsyZ00DDnNx1E85f2bsfb5:CJv7Vx11Ssfb5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2ff34530a19c2ea0d94b1f6b7e254dcf7f3917e91e8c47b2eb4c402bb127d5bN

Files

f2ff34530a19c2ea0d94b1f6b7e254dcf7f3917e91e8c47b2eb4c402bb127d5bN
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.TestPlatform.Utilities.pdb

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ