befc9353a097ca073ed862402fb47b79b7c4b4f9abadb55d8dbeb35064495252 | Triage

Sharing

General

Target

befc9353a097ca073ed862402fb47b79b7c4b4f9abadb55d8dbeb35064495252
Size

30KB
MD5

8a11dfd032a77415e9c53a836bc2990a
SHA1

95475f559aa6d1b967b2c9504e16466453bf76e6
SHA256

befc9353a097ca073ed862402fb47b79b7c4b4f9abadb55d8dbeb35064495252
SHA512

37b86353b089fd4f8c31eb2f79291f1db8f3c44e785b562de343ffe6d43dcce480b38f44e87c7e54e27b95fd1819f91323b745540af0fcb22530cfcff07a8d28
SSDEEP

384:kZJkifw8dvBOgRQcHx+GyVqjK61aGo7/pdiqJDY8REyofzXHczOK97s:kcwvQeQrqjK5Fx6pXkOB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
befc9353a097ca073ed862402fb47b79b7c4b4f9abadb55d8dbeb35064495252

Files

befc9353a097ca073ed862402fb47b79b7c4b4f9abadb55d8dbeb35064495252
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

I:\NET\5czPay\UCenter\SmartPal.IPS\obj\Debug\SmartPal.IPS.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ