Ookii[.]Dialogs[.]Wpf[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ookii.Dialogs.Wpf.dll
Size

101KB
MD5

0639ef1897705ee546e1580bc33d8286
SHA1

894df794d1ff2ae657bc0c5ac3d4f7f64a91e0c2
SHA256

1e39859b4c14afabbef8b3c3ad2607524148757fdb25bd1b2d801facebd5032f
SHA512

d0cf4fb5b5b923b97b3ad343031b257acceddbb06dd5bb67106d2d75ad7a5f56cd97c849eacd245e4c760453db78d252cd0c755e7274b42fb272b4ddd3aef3ef
SSDEEP

1536:jV8mYEiU5uh8sm6b0HR4+mDe1ZcmzAyHIuciBwKaHSWhqrbB3/G2y:x8mYEioo6ZjPcuci2Sd9G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ookii.Dialogs.Wpf.dll

Files

Ookii.Dialogs.Wpf.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ