dc8ad00248731e03c0b57c8301d276a30d4da80d4ebef41c256e609c02a01f8e | Triage

Sharing

General

Target

dc8ad00248731e03c0b57c8301d276a30d4da80d4ebef41c256e609c02a01f8e
Size

129KB
MD5

2595e3de77e25b00498ef62948ede886
SHA1

dc88b2ae7d638f8d6e02c7ccbff4b69db91a0f2f
SHA256

dc8ad00248731e03c0b57c8301d276a30d4da80d4ebef41c256e609c02a01f8e
SHA512

7b729fc3d0b0580165f51ffc9fcf9dd2beb6ac7dc4aa20adab84a358bf04ed6e8f64d094fca4a249bb7128cbf26ff9a795e952cbc07e40d56ec4591f654fab70
SSDEEP

3072:n5JcfXY3XdAk3Fxro0iJ7WAXFDBsbyrJI+nc9JKpQzO9HrwfDd8j7DmC/tBkupk:2uMFDBsbyriPziiC/tBJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc8ad00248731e03c0b57c8301d276a30d4da80d4ebef41c256e609c02a01f8e

Files

dc8ad00248731e03c0b57c8301d276a30d4da80d4ebef41c256e609c02a01f8e
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\dbs\el\zlt\Target\x64\ship\search_foundation\x-none\docparsing\formathandlers\docx\Microsoft.Ceres.DocParsing.FormatHandlers.Docx.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ