General

  • Target
    AfCore.dll
  • Size 2.4MB
  • Sample260925-krabqaxtdv
  • SHA256 5e4ffbf6cf3d190ff3da1077020ae9a88617bb07a8b17b8c89c44f9ac9518135
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • AfCore.dll
    .dll 2.4MB

AfCore.dll

  • IMPHASH bba8ab03cc8ebbd56889ce00d8fd5a27
  • SHA256 5e4ffbf6cf3d190ff3da1077020ae9a88617bb07a8b17b8c89c44f9ac9518135
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Password
sdfds
Minor OS version
0
Major OS version
6
Entry point
5369070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths
C:\ArcGIS\bin\AfCore.pdb