FlexlineDTE_JC[.]dll | Triage

Sharing

General

Target

FlexlineDTE_JC.dll
Size

47KB
MD5

f5b43e896f7f71b463e387d7a5837044
SHA1

8a27dfe28f17e3e7d7df846ecc13e9685ebc4ab9
SHA256

d3300d3a9ae6a1d1e9bfd88056baa5f14df907bb795f1401a8639c5c96da2b83
SHA512

0904bc9836101c62b095db72c88ea1faa8dc188bacb133da63ee4f3585c79df30eb68b23549baea8f47201e17227d116ddc0a0475363f32411515f88240c46d5
SSDEEP

768:S1I6m65seo3Japc6KSjXsXr3kwZGONeI02GoK9r3fgBOolvkDYASLlrvO1:vBeo3Ipc6KSjXsXTkwZigEr4nl8Dsrm1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FlexlineDTE_JC.dll

Files

FlexlineDTE_JC.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ