a68fe3e72af15aa62c0770b4a1f3840ccbe5b16533933900684378fdea219af1N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a68fe3e72af15aa62c0770b4a1f3840ccbe5b16533933900684378fdea219af1N
Size

6KB
MD5

5986ca8a922f9d262fc2ad1e2228c1d0
SHA1

96a6e5d196f1aa9f7c8114d6521c2b2a62abceea
SHA256

a68fe3e72af15aa62c0770b4a1f3840ccbe5b16533933900684378fdea219af1
SHA512

5520f50023531099aad04bb5dfcb592532ac541c395ecad67514586ffee35712e370437e6cad964035196fd1cb81376e781080bd05203fa49762713c2c1aa575
SSDEEP

192:QGNhuBIl0Sbv77wE01aigGhX+I/hJFz51y:QoUIllul/B+Itm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a68fe3e72af15aa62c0770b4a1f3840ccbe5b16533933900684378fdea219af1N

Files

a68fe3e72af15aa62c0770b4a1f3840ccbe5b16533933900684378fdea219af1N
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Gitlab-Runner\builds\3sdy2s5z\1\deepl\apps\deepl-windows\ViewModels.WhatsNew\obj\x64\Release\ViewModels.WhatsNew.pdb

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ