coreclr[.]dll | Triage

General

Target

coreclr.dll
Size

71KB
MD5

bc30a7d5cd53ef5780fe364586ee448e
SHA1

2b9f6d8d15894c201626b8742de3524a351a4155
SHA256

3c0d3783a5ccdecf3786db0053b1352d6fb5a37d9081cc32ec6d5bb611064ce3
SHA512

1ba3e495d0fb26b1be434274afe4c4f31acd5962a6e31edd5d575739cc1c23dc5ba2d120f5499992285abade2b100c48f9faab6b21e4a271287044c01625cde0
SSDEEP

1536:46U/3nScGMjUkf99NKakmxNf0elmcC8af:46ESbX89NK8xM98i

Score

1^/10

Malware Config

Signatures

Files

coreclr.dll
.dll windows x86

200fe492bd229adc88ac9e8a3328f3a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
OutputDebugStringA
WaitForSingleObject
CreateThread
VirtualAllocEx
GetCurrentProcess
Sleep
GetSystemTimeAsFileTime
GetCurrentThreadId
DecodePointer
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
WideCharToMultiByte
GetTimeZoneInformation
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetLastError
InterlockedDecrement
GetProcAddress
HeapFree
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
IsProcessorFeaturePresent
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
LoadLibraryW
GetModuleFileNameW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetStdHandle
WriteConsoleW
HeapSize
CompareStringW
SetEnvironmentVariableA
CreateFileW
CloseHandle
FlushFileBuffers

Exports

Exports

GetCLRRuntimeHost

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

200fe492bd229adc88ac9e8a3328f3a3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 21KB - Virtual size: 28KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 21KB - Virtual size: 28KB

.reloc
Size: 3KB - Virtual size: 3KB