System[.]Core[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

System.Core.dll
Size

10.4MB
MD5

80a7d7357d34d0c612043c18b458c71e
SHA1

32ea68acab2725b08a2bae79557510285a9115de
SHA256

e98e4ccbe483dfcff686b35381c7b7f16d094da09e393e9f26be3dd81666537f
SHA512

fcc59fbd3790643f54a4d207851ccc4d6abd272366935e69c4ee4a15fe374558b910821b27b5cbad6d2ec93e21654008bf8bfca6ac1a982efbff8d98bec579b5
SSDEEP

98304:a+AMP086N+CiyFfe6GsUPYSrZFqL1i8J+fz35pRu7gCsH:HQ+Sde6GDASq10Q/s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
System.Core.dll

Files

System.Core.dll
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.data
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6.9MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 374KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ