NoStartUp (1)[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NoStartUp (1).dll
Size

8KB
MD5

36a1c0f3e1d5968928173543e97b4575
SHA1

0602810209539123a5a012f419cf7c3f8e62baa6
SHA256

93d1bf2d72d7663b15b78f0d9ab0840a840c6848547dcb184de441bf0ea3915f
SHA512

d64141acde61a6a0bbdcb4845935dbe9a0ab2dbc855eb78fea5c3665f71ac88525a7727dd171271aa7f47fb8b3e8c178bc338f20eb752084860c69d2fb7b6fc2
SSDEEP

192:dHB4tBS5sNLH99AIj0S4VG1XCoqftVMvDhaK1:dHiNND99AIj09OXCpe1

Score

N/A

Malware Config

Signatures

Files

NoStartUp (1).dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ