DHLL[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHLL.exe
Size

9KB
MD5

a89a1206c6fae40dc467cbc992ea4da6
SHA1

14aa55fa861b1e67a2ea7b983ca6284acba449f1
SHA256

cda801f267b326f6541a11a06c8adee9c519a064433f9e2f69ac728f7f9f21f5
SHA512

b7793eec2b5be3c88be90aec50e5d4b48afa6ce2837bf5ccf5ff1fd44fdd6087282eb71bbcee2cd4e2e858ac0066c902a0dcf0270a046069b7922ec1d044f00f
SSDEEP

192:uc0WHRIgtaxkGECyUlILG1LygEqeXN7HIk+Aqk8:uxWHRNtFGJlILG1LygEqeXJH+Aqk

Score

N/A

Malware Config

Signatures

Files

DHLL.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ