b973d27f8036ca128fa4e6460bef0b76bdac509010c3e23ff77f66c78bac4029N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b973d27f8036ca128fa4e6460bef0b76bdac509010c3e23ff77f66c78bac4029N
Size

3.1MB
MD5

438c017850c8e8c75a92c02516f6c220
SHA1

cce70d709a62bdba30096954928c4b8c697aba42
SHA256

b973d27f8036ca128fa4e6460bef0b76bdac509010c3e23ff77f66c78bac4029
SHA512

7dded15a2008b4d4bb2ad81e5afcf0fd6df9cf987cf977a683cf8cae0750e06740d36d34e50c76bc9a8e0b79d07000c4a19aa9a01a30cc12b6c5a6e2d4fd5876
SSDEEP

49152:TChRic8TRQ0nsXhP+UPQ/BJMkUxclrDHXyobTw+9y1MtGDE1/Dei:eDR8TR/nyPUN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b973d27f8036ca128fa4e6460bef0b76bdac509010c3e23ff77f66c78bac4029N

Files

b973d27f8036ca128fa4e6460bef0b76bdac509010c3e23ff77f66c78bac4029N
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\YarsPatch\Steam\Library\Bee\artifacts\1900b0aP.dag\Assembly-CSharp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ