FlDTEImpresionPE_JC[.]dll | Triage

Sharing

General

Target

FlDTEImpresionPE_JC.dll
Size

28KB
MD5

3e763883cc8aa0c7e469c2487bc84e3f
SHA1

c6bbe56e4681badb31b07707717c56919f8e1a93
SHA256

e0b8d911f8bcf54b99b3f2315a61c5a323eb9a8a132cc988235da864718578fb
SHA512

57b2f5ff934b4197ad2d19e41b3e425a0b66b0f4da07fbb2558588b6184562824fd5523fe22e00f4ad01a99e452014072648fbe2fe6b72e74a49da5f1499cc43
SSDEEP

192:L7mEXmIk6uN81g0Te5Q4HmC60Xn1ZVCnlYJL/ePkX9F5RKMzXdXjUqSBM:LismbTh08XnnxqPG9F5RKMzX8M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FlDTEImpresionPE_JC.dll

Files

FlDTEImpresionPE_JC.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 183B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ