Colorful[.]Console_2[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Colorful.Console_2.dll
Size

88KB
MD5

8983948225467c6223fee636616c20f4
SHA1

b2448ca55171b2b2ca7035d4eb8a03dc0df90fb6
SHA256

a17938357cc1ad9e11c3bbba94f75fd186972213c2d129cf71444c6dcb9607f7
SHA512

7af3283703a9bb9569219eb445f738faf15836832f734f19ba6d63f6b493ecbfb236c83b09ae5dff23c8ef9ecaf839709f72aa3f8ffee68d6d04efa76163bed5
SSDEEP

1536:+LeJYyqw6Yu+tJ9gbYm35KNaxe9KLCnbo+:+xyqwpu+IzOJ9KLws+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Colorful.Console_2.dll

Files

Colorful.Console_2.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ