NHSE[.]Sprites[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NHSE.Sprites.dll
Size

6.0MB
MD5

ccf959d7170b473dcf618e55642b04f8
SHA1

ab111fa75d4dd816b4df0a6504ee30fd62c04d30
SHA256

38b9f21b57a40278ce3e8940e917e3280f9950499b7dbacdc0c812effbd67a38
SHA512

7da4b9452787ed686fe6319a4ae4bfe9e2b8d39a09756e3272750c6e9e3404a26908f6add386427731e815caf21bcfa4780bf5f29f3f75425ad14cad8160767c
SSDEEP

98304:t360HIP0bfI7/mAZ6OYGLcB/M1gNp9LC3hC1DV:t36PPYYmBTOuf8C1DV

Score

1^/10

Malware Config

Signatures

Files

NHSE.Sprites.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ