39a0094aa5fc68f5f9d1983854d489b360ae21c4e5617c4748b558faaf8eb3e4N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39a0094aa5fc68f5f9d1983854d489b360ae21c4e5617c4748b558faaf8eb3e4N
Size

54KB
MD5

f3b5355d902562ca8dd44b5ee203d550
SHA1

58e960dc53ff749a238335e691264af7286abf08
SHA256

39a0094aa5fc68f5f9d1983854d489b360ae21c4e5617c4748b558faaf8eb3e4
SHA512

e4194fce7d7ee2707149a79c1aa157b8f6faa0186cd9fa949e082b754a8bb70dbd54959dd3ac96f840a8e7e7f17c14d367984b5fad8953d846715d38ee4fde50
SSDEEP

1536:4Qi9C7K8zwCDj4sgzMoRSbhqBDi50M+kePwls9z/VNblN:h2W/1qBDi50M+4s/Nn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39a0094aa5fc68f5f9d1983854d489b360ae21c4e5617c4748b558faaf8eb3e4N

Files

39a0094aa5fc68f5f9d1983854d489b360ae21c4e5617c4748b558faaf8eb3e4N
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Gitlab-Runner\builds\3sdy2s5z\1\deepl\apps\deepl-windows\Persistence.Option\obj\x64\Release\Persistence.Option.pdb

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ