binary[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

binary.dll
Size

991KB
MD5

0601d3df4ee3defa67739b05d248b562
SHA1

3265fd05ae35b95f0720b6c9c7f7449446bddf1d
SHA256

53502e1cc3233130394f712f826f79b6ffa7de2a2b72de0355c35bbb2a2170d5
SHA512

fe9c7ff707c6b084ce5f153c673a448234e1162d55f01f2cd5a5e8c61b2c1522018e84b261b6ee6471c93a22ccf36b45944994652e5327ab55a192f7d13b1c8c
SSDEEP

24576:2uI6m9e87jPzJ7k1CWEd2gSnrLp69Pp8qO3vtamltGtcMP8:2uI6587jPzJ6CWEdsrLE/83amlYc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
binary.dll

Files

binary.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 989KB - Virtual size: 988KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ