2nd[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2nd.dll
Size

173KB
MD5

1356a94f2295499f1eef98661a2042a3
SHA1

3809c075dea5f17511b5945110f4d6b1ac92fab5
SHA256

f7c66ce4c357c3a7c44dda121f8bb6a62bb3e0bc6f481619b7b5ad83855d628b
SHA512

6b37272e0da0f07bd99d0ff23cf64597d7465f8225a0a1a64b56ba1d2cfec533e592249e2dda60f8dbba5d3ce4f52bb03736109235264a10f30b63d7c8fa985c
SSDEEP

3072:Yp59MCjXoT2a8wllMX5vxhd6yr9NePe17poGH4y7poQsnEYyd3dVEUKB+b6RcFu9:72vBdV9b4yZsFyVYCI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2nd.dll

Files

2nd.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ