b0b81e22b06b1808a12e08dee0e2d3a5f10e472d868012fe5076b6daf17e15da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0b81e22b06b1808a12e08dee0e2d3a5f10e472d868012fe5076b6daf17e15da
Size

86KB
MD5

3b44f0a885dd9dfb83fb3fc2112814f6
SHA1

cfcad4167601a0a7d34c8a6b35a6fbf5b7995504
SHA256

b0b81e22b06b1808a12e08dee0e2d3a5f10e472d868012fe5076b6daf17e15da
SHA512

6b4085343cec47cf480b6c20741ef5c6d75aeef841221ae2ac992ebe6acaa6eda85e81ba71965b0e7c2ebaeb8aff761c273bc43bb84bb02485b6915644d7d013
SSDEEP

1536:+NKRrX6h461+ntVRTxBIgOmHj015qw6Z2anDwcxDb8whmBH0dUyU8LgRYm:d4hp1+nfRwas4Jh1dUWsx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0b81e22b06b1808a12e08dee0e2d3a5f10e472d868012fe5076b6daf17e15da

Files

b0b81e22b06b1808a12e08dee0e2d3a5f10e472d868012fe5076b6daf17e15da
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\WorkSpace\TFS\ZLSoftBusineseHome\Assemblies\ZLHIS\netstandard2.0\Obfuscator_Output\zlHisLibrary.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ